@adea-ai/plugins 2.0.40 → 2.0.41

package/dist/portable-catalog.js

@@ -139,6 +139,25 @@ export async function synchronizePortable(options) {
         },
     };
 }
+/**
+ * A single-line summary of why a release's package descriptor was refused.
+ *
+ * The schema's own failure is a structured issue list; the catalog's refusal
+ * contract is one typed line. The first issue is kept as the detail, because
+ * it names the field that was wrong.
+ */
+function describeProvenanceFailure(error) {
+    const issues = error.issues;
+    if (Array.isArray(issues) && issues.length > 0) {
+        const first = issues[0];
+        const path = Array.isArray(first.path) ? first.path.join('.') : '';
+        const message = typeof first.message === 'string' ? first.message : '';
+        return [path, message].filter(Boolean).join(': ').replace(/\s+/g, ' ').slice(0, 200);
+    }
+    return error instanceof Error
+        ? error.message.replace(/\s+/g, ' ').slice(0, 200)
+        : 'the descriptor is not a package recipe';
+}
 export function verifyPortableCatalog(catalog, requirePortable = false) {
     const { catalogId, ...body } = CatalogSchema.parse(catalog);
     if (catalogId !== `catalog:${digest(body).slice(7)}`)
@@ -162,7 +181,18 @@ export function verifyPortableCatalog(catalog, requirePortable = false) {
                     throw new Error(`PORTABLE_RESYNC_REQUIRED: ${plugin.pluginId}`);
                 continue;
             }
-            const pkg = verifyAgentPackage(descriptor);
+            let pkg;
+            try {
+                pkg = verifyAgentPackage(descriptor);
+            }
+            catch (error) {
+                // A consumer imports a catalog it did not compile, so a malformed
+                // provenance descriptor is an IMPORT failure, and it must be refused
+                // the way every other failure here is refused: one typed, single-line
+                // reason that names the plugin. The schema's own multi-line issue
+                // dump is not a refusal a consumer can match on.
+                throw new Error(`PACKAGE_PROVENANCE_INVALID: ${plugin.pluginId} (${describeProvenanceFailure(error)})`, { cause: error });
+            }
             if (release.contentResolution !== 'complete' ||
                 pkg.sourceDigest !== release.canonicalContentDigest)
                 throw new Error(`PACKAGE_PROVENANCE_MISMATCH: ${plugin.pluginId}`);

package/dist/portable-catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"portable-catalog.js","sourceRoot":"","sources":["../src/portable-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAA6B,MAAM,aAAa,CAAA;AACrF,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,eAAe,EACf,MAAM,GAIP,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAErD,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAA;AAClD,SAAS,eAAe,CAAC,OAA4B;IACnD,OAAO,CACL,CAAC,CAAC,OAAO;QACT,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/B,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE;YACzC,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAA;YAC3D,OAAO,CACL,OAAO,CAAC,iBAAiB,KAAK,UAAU;gBACxC,uEAAuE;gBACvE,uEAAuE;gBACvE,OAAO,CAAC,eAAe,CAAC,eAAe,KAAK,wBAAwB;gBACpE,KAAK,KAAK,IAAI;gBACd,OAAO,KAAK,KAAK,QAAQ;gBACzB,mBAAmB,IAAI,KAAK;gBAC5B,KAAK,CAAC,iBAAiB,KAAK,kBAAkB,CAC/C,CAAA;QACH,CAAC,CAAC,CACH,CACF,CAAA;AACH,CAAC;AACD,SAAS,aAAa,CACpB,GAA2C;IAE3C,mGAAmG;IACnG,OAAO,MAAM,CAAC,WAAW,CACvB,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACrC,OAAO;QACP;YACE,MAAM,EACJ,GAAG,CAAC,MAAM,KAAK,aAAa;gBAC1B,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS;oBACxB,CAAC,CAAC,qBAAqB;oBACvB,CAAC,CAAC,SAAS;YACjB,OAAO,EAAE;gBACP,GAAG,CAAC,MAAM,KAAK,aAAa;oBAC1B,CAAC,CAAC,0CAA0C;oBAC5C,CAAC,CAAC,uIAAuI;aAC5I;YACD,uBAAuB,EAAE;gBACvB,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvE,CAAC;aACH;SACF;KACF,CAAC,CAC+B,CAAA;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAkB;IAC1D,IAAI,OAAO,CAAC,eAAe;QAAE,qBAAqB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAC3E,MAAM,gBAAgB,GAAqB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACtE,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAA;QAChF,IACE,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;YACxC,OAAO,CAAC,sBAAsB,KAAK,QAAQ,CAAC,sBAAsB;YAClE,OAAO,CAAC,qBAAqB,KAAK,QAAQ,CAAC,qBAAqB;YAChE,OAAO,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB;YACxD,OAAO,CAAC,kBAAkB,KAAK,QAAQ,CAAC,kBAAkB;YAC1D,OAAO,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB;YAExD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;QACzD,MAAM,GAAG,GAAG,mBAAmB,CAAC;YAC9B,GAAG,QAAQ;YACX,IAAI;YACJ,YAAY,EAAE,QAAQ,CAAC,sBAAsB;SAC9C,CAAC,CAAA;QACF,OAAO;YACL,GAAG,OAAO;YACV,eAAe,EAAE,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE;SAC7E,CAAA;IACH,CAAC,CAAA;IACD,8EAA8E;IAC9E,gFAAgF;IAChF,MAAM,KAAK,GAAG;QACZ,GAAG,OAAO;QACV,YAAY,EAAE,OAAO,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;QACtE,gBAAgB;KACjB,CAAA;IACD,IAAI,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAA;IACrC,IACE,CAAC,MAAM,CAAC,OAAO;QACf,CAAC,KAAK,CAAC,YAAY;QACnB,CAAC,eAAe,CAAC,KAAK,CAAC,eAAe,CAAC;QACvC,KAAK,CAAC,YAAY,EAClB,CAAC;QACD,oFAAoF;QACpF,4EAA4E;QAC5E,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,YAAY;QAAE,OAAO,MAAM,CAAA;IACxE,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAA;QACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,gBAAgB,CAAC,CAAA;QAC1F,MAAM,GAAG,GAAG,QAAQ,EAAE,eAAe,CAAC,oBAAoB,CAAC,CAAA;QAC3D,OAAO,CAAC,IAAI,CAAC;YACX,GAAG,MAAM;YACT,iBAAiB,EAAE,QAAQ;YAC3B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,aAAa,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACzE,uEAAuE;IACvE,qEAAqE;IACrE,0BAA0B;IAC1B,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IACzE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC;QAClC,GAAG,OAAO;QACV,SAAS,EAAE,WAAW,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;KACjD,CAAC,CAAA;IACF,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAC9B,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;QACtD,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,qEAAqE;QACrE,yEAAyE;QACzE,6EAA6E;QAC7E,4CAA4C;QAC5C,GAAG,CAAC,OAAO,CAAC,wBAAwB;YAClC,CAAC,CAAC,EAAE,wBAAwB,EAAE,OAAO,CAAC,wBAAwB,EAAE;YAChE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,wBAAwB;YAClC,CAAC,CAAC,EAAE,wBAAwB,EAAE,OAAO,CAAC,wBAAwB,EAAE;YAChE,CAAC,CAAC,EAAE,CAAC;QACP,mBAAmB,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,SAAS;KAC5D,CAAC,CAAA;IACF,eAAe,CAAC,SAAS,CAAC,CAAA;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;SAC5B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QACjB,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC9F,OAAO,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,CAAA;IAClD,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACnC,OAAO;QACL,GAAG,MAAM;QACT,OAAO;QACP,SAAS;QACT,YAAY,EAAE;YACZ,GAAG,MAAM,CAAC,YAAY;YACtB,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;SAC7F;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB,EAAE,eAAe,GAAG,KAAK;IAC7E,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC3D,IAAI,SAAS,KAAK,WAAW,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC5F,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;QACpE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QACxB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;QACtF,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,iBAAiB,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAC7F,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAChD,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO;QAClC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC/C,IAAI,eAAe,IAAI,OAAO,CAAC,iBAAiB,KAAK,UAAU;gBAC7D,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAA;YAChE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,eAAe,IAAI,OAAO,CAAC,iBAAiB,KAAK,UAAU;oBAC7D,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;gBACjE,SAAQ;YACV,CAAC;YACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;YAC1C,IACE,OAAO,CAAC,iBAAiB,KAAK,UAAU;gBACxC,GAAG,CAAC,YAAY,KAAK,OAAO,CAAC,sBAAsB;gBAEnD,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;YACpE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC9C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK;gBAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;oBAC7D,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;QACxE,CAAC;AACL,CAAC"}
+{"version":3,"file":"portable-catalog.js","sourceRoot":"","sources":["../src/portable-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAA6B,MAAM,aAAa,CAAA;AACrF,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,eAAe,EACf,MAAM,GAIP,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAErD,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAA;AAClD,SAAS,eAAe,CAAC,OAA4B;IACnD,OAAO,CACL,CAAC,CAAC,OAAO;QACT,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/B,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE;YACzC,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAA;YAC3D,OAAO,CACL,OAAO,CAAC,iBAAiB,KAAK,UAAU;gBACxC,uEAAuE;gBACvE,uEAAuE;gBACvE,OAAO,CAAC,eAAe,CAAC,eAAe,KAAK,wBAAwB;gBACpE,KAAK,KAAK,IAAI;gBACd,OAAO,KAAK,KAAK,QAAQ;gBACzB,mBAAmB,IAAI,KAAK;gBAC5B,KAAK,CAAC,iBAAiB,KAAK,kBAAkB,CAC/C,CAAA;QACH,CAAC,CAAC,CACH,CACF,CAAA;AACH,CAAC;AACD,SAAS,aAAa,CACpB,GAA2C;IAE3C,mGAAmG;IACnG,OAAO,MAAM,CAAC,WAAW,CACvB,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACrC,OAAO;QACP;YACE,MAAM,EACJ,GAAG,CAAC,MAAM,KAAK,aAAa;gBAC1B,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS;oBACxB,CAAC,CAAC,qBAAqB;oBACvB,CAAC,CAAC,SAAS;YACjB,OAAO,EAAE;gBACP,GAAG,CAAC,MAAM,KAAK,aAAa;oBAC1B,CAAC,CAAC,0CAA0C;oBAC5C,CAAC,CAAC,uIAAuI;aAC5I;YACD,uBAAuB,EAAE;gBACvB,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvE,CAAC;aACH;SACF;KACF,CAAC,CAC+B,CAAA;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAkB;IAC1D,IAAI,OAAO,CAAC,eAAe;QAAE,qBAAqB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAC3E,MAAM,gBAAgB,GAAqB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACtE,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAA;QAChF,IACE,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;YACxC,OAAO,CAAC,sBAAsB,KAAK,QAAQ,CAAC,sBAAsB;YAClE,OAAO,CAAC,qBAAqB,KAAK,QAAQ,CAAC,qBAAqB;YAChE,OAAO,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB;YACxD,OAAO,CAAC,kBAAkB,KAAK,QAAQ,CAAC,kBAAkB;YAC1D,OAAO,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB;YAExD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;QACzD,MAAM,GAAG,GAAG,mBAAmB,CAAC;YAC9B,GAAG,QAAQ;YACX,IAAI;YACJ,YAAY,EAAE,QAAQ,CAAC,sBAAsB;SAC9C,CAAC,CAAA;QACF,OAAO;YACL,GAAG,OAAO;YACV,eAAe,EAAE,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE;SAC7E,CAAA;IACH,CAAC,CAAA;IACD,8EAA8E;IAC9E,gFAAgF;IAChF,MAAM,KAAK,GAAG;QACZ,GAAG,OAAO;QACV,YAAY,EAAE,OAAO,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;QACtE,gBAAgB;KACjB,CAAA;IACD,IAAI,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAA;IACrC,IACE,CAAC,MAAM,CAAC,OAAO;QACf,CAAC,KAAK,CAAC,YAAY;QACnB,CAAC,eAAe,CAAC,KAAK,CAAC,eAAe,CAAC;QACvC,KAAK,CAAC,YAAY,EAClB,CAAC;QACD,oFAAoF;QACpF,4EAA4E;QAC5E,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,YAAY;QAAE,OAAO,MAAM,CAAA;IACxE,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAA;QACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,gBAAgB,CAAC,CAAA;QAC1F,MAAM,GAAG,GAAG,QAAQ,EAAE,eAAe,CAAC,oBAAoB,CAAC,CAAA;QAC3D,OAAO,CAAC,IAAI,CAAC;YACX,GAAG,MAAM;YACT,iBAAiB,EAAE,QAAQ;YAC3B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,aAAa,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACzE,uEAAuE;IACvE,qEAAqE;IACrE,0BAA0B;IAC1B,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IACzE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC;QAClC,GAAG,OAAO;QACV,SAAS,EAAE,WAAW,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;KACjD,CAAC,CAAA;IACF,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAC9B,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;QACtD,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,qEAAqE;QACrE,yEAAyE;QACzE,6EAA6E;QAC7E,4CAA4C;QAC5C,GAAG,CAAC,OAAO,CAAC,wBAAwB;YAClC,CAAC,CAAC,EAAE,wBAAwB,EAAE,OAAO,CAAC,wBAAwB,EAAE;YAChE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,wBAAwB;YAClC,CAAC,CAAC,EAAE,wBAAwB,EAAE,OAAO,CAAC,wBAAwB,EAAE;YAChE,CAAC,CAAC,EAAE,CAAC;QACP,mBAAmB,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,SAAS;KAC5D,CAAC,CAAA;IACF,eAAe,CAAC,SAAS,CAAC,CAAA;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;SAC5B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QACjB,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC9F,OAAO,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,CAAA;IAClD,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACnC,OAAO;QACL,GAAG,MAAM;QACT,OAAO;QACP,SAAS;QACT,YAAY,EAAE;YACZ,GAAG,MAAM,CAAC,YAAY;YACtB,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;SAC7F;KACF,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAAC,KAAc;IAC/C,MAAM,MAAM,GAAI,KAA8B,CAAC,MAAM,CAAA;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAA0C,CAAA;QAChE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAClE,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;QACtE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACtF,CAAC;IACD,OAAO,KAAK,YAAY,KAAK;QAC3B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAClD,CAAC,CAAC,wCAAwC,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB,EAAE,eAAe,GAAG,KAAK;IAC7E,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC3D,IAAI,SAAS,KAAK,WAAW,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC5F,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;QACpE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QACxB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;QACtF,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,iBAAiB,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAC7F,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAChD,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO;QAClC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC/C,IAAI,eAAe,IAAI,OAAO,CAAC,iBAAiB,KAAK,UAAU;gBAC7D,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAA;YAChE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,eAAe,IAAI,OAAO,CAAC,iBAAiB,KAAK,UAAU;oBAC7D,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;gBACjE,SAAQ;YACV,CAAC;YACD,IAAI,GAA0C,CAAA;YAC9C,IAAI,CAAC;gBACH,GAAG,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAA;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,kEAAkE;gBAClE,qEAAqE;gBACrE,sEAAsE;gBACtE,kEAAkE;gBAClE,iDAAiD;gBACjD,MAAM,IAAI,KAAK,CACb,+BAA+B,MAAM,CAAC,QAAQ,KAAK,yBAAyB,CAAC,KAAK,CAAC,GAAG,EACtF,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAA;YACH,CAAC;YACD,IACE,OAAO,CAAC,iBAAiB,KAAK,UAAU;gBACxC,GAAG,CAAC,YAAY,KAAK,OAAO,CAAC,sBAAsB;gBAEnD,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;YACpE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC9C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK;gBAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;oBAC7D,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;QACxE,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adea-ai/plugins",
-  "version": "2.0.40",
+  "version": "2.0.41",
   "description": "Deterministic compiler for AI agent plugin marketplaces: schemas, source parsing, provenance verification, per-harness materialization, and provenance-checked static artifacts.",
   "keywords": [
     "agents",

package/src/agent-plugins-harness.test.ts

@@ -270,3 +270,320 @@ describe('MCP binding preparation', () => {
     }
   })
 })
+
+/** A package built from an explicit file map, so every shape is explicit. */
+function packageFrom(files: Record<string, string>) {
+  return compileAgentPackage({
+    files: new Map(
+      Object.entries(files).map(([path, text]) => [path, new TextEncoder().encode(text)])
+    ),
+    name: 'issues',
+  })
+}
+
+const MANIFEST = JSON.stringify({ $schema: PLUGIN_SCHEMA_ID, name: 'issues' })
+const SKILL = '---\nname: issues\ndescription: Work with issues.\n---\nInstructions.'
+const MCP_BOTH = JSON.stringify({
+  $schema: MCP_SCHEMA_ID,
+  mcpServers: {
+    api: { type: 'streamable-http', url: 'https://example.test/mcp' },
+    local: { type: 'stdio', command: 'node' },
+  },
+})
+
+/** The package shapes the compatibility matrix is exercised over. */
+const PACKAGES = {
+  full: packageFrom({
+    'plugin.json': MANIFEST,
+    'skills/issues/SKILL.md': SKILL,
+    'mcp.json': MCP_BOTH,
+  }),
+  skillsOnly: packageFrom({
+    'plugin.json': MANIFEST,
+    'skills/issues/SKILL.md': SKILL,
+  }),
+  mcpOnly: packageFrom({
+    'plugin.json': MANIFEST,
+    'mcp.json': MCP_BOTH,
+  }),
+  withHooks: packageFrom({
+    'plugin.json': MANIFEST,
+    'skills/issues/SKILL.md': SKILL,
+    'mcp.json': MCP_BOTH,
+    'hooks/hooks.json': '{}',
+  }),
+  bare: packageFrom({ 'plugin.json': MANIFEST }),
+} as const
+
+/** The profile shapes the compatibility matrix is exercised over. */
+const PROFILES = {
+  native: profile({
+    agentPlugins: {
+      versions: ['1.0.0'],
+      skills: true,
+      mcpTransports: ['stdio', 'streamable-http'],
+    },
+    components: { skillDirectories: true, mcpTransports: ['stdio', 'streamable-http'] },
+  }),
+  versionUnsupported: profile({
+    agentPlugins: {
+      versions: ['9.9.9'],
+      skills: true,
+      mcpTransports: ['stdio', 'streamable-http'],
+    },
+    components: { skillDirectories: true, mcpTransports: ['stdio', 'streamable-http'] },
+  }),
+  nativeSkillsOff: profile({
+    agentPlugins: {
+      versions: ['1.0.0'],
+      skills: false,
+      mcpTransports: ['stdio', 'streamable-http'],
+    },
+    components: { skillDirectories: true, mcpTransports: ['stdio', 'streamable-http'] },
+  }),
+  adapterStronger: profile({
+    agentPlugins: { versions: ['1.0.0'], skills: true, mcpTransports: ['stdio'] },
+    components: { skillDirectories: true, mcpTransports: ['stdio', 'streamable-http'] },
+  }),
+  nothingCovered: profile({
+    agentPlugins: { versions: ['1.0.0'], skills: false, mcpTransports: [] },
+    components: { skillDirectories: false, mcpTransports: [] },
+  }),
+  nativeWithoutHttp: profile({
+    agentPlugins: { versions: ['1.0.0'], skills: true, mcpTransports: ['stdio'] },
+    components: { skillDirectories: false, mcpTransports: [] },
+  }),
+} as const
+
+/**
+ * Twelve compatibility CASES, chosen to cover the boundaries that matter.
+ *
+ * This is a curated set, NOT a Cartesian product of the package shapes and the
+ * profile shapes: the shapes multiply out to far more combinations than the
+ * contract distinguishes. Each case states the package shape, the profile
+ * shape, whether a partial adoption was allowed, and what the plan must then
+ * contain — the strategy, the compatibility, the selected skills and servers,
+ * and the COMPLETE set of disabled components.
+ *
+ * The expectations are the EXISTING contract: the native loader is used only
+ * when the profile supports the package version and the native path covers at
+ * least as much as the adapter; a partial plan is refused unless the caller
+ * opts in; a plan that covers nothing is unsupported.
+ */
+const MATRIX: {
+  name: string
+  pkg: keyof typeof PACKAGES
+  profile: keyof typeof PROFILES
+  allowPartial?: boolean
+  strategy: string
+  compatibility: string
+  skills: string[]
+  mcp: string[]
+  disabled: string[]
+}[] = [
+  {
+    name: 'supported version, native covers everything',
+    pkg: 'full',
+    profile: 'native',
+    strategy: 'native-agent-plugin',
+    compatibility: 'full',
+    skills: ['skills/issues'],
+    mcp: ['api', 'local'],
+    disabled: [],
+  },
+  {
+    name: 'unsupported package version falls back to the component adapter',
+    pkg: 'full',
+    profile: 'versionUnsupported',
+    strategy: 'component-adapter',
+    compatibility: 'full',
+    skills: ['skills/issues'],
+    mcp: ['api', 'local'],
+    disabled: [],
+  },
+  {
+    name: 'a native loader without skills yields to the stronger adapter',
+    pkg: 'full',
+    profile: 'nativeSkillsOff',
+    strategy: 'component-adapter',
+    compatibility: 'full',
+    skills: ['skills/issues'],
+    mcp: ['api', 'local'],
+    disabled: [],
+  },
+  {
+    name: 'an adapter that covers more wins over a weaker native loader',
+    pkg: 'full',
+    profile: 'adapterStronger',
+    strategy: 'component-adapter',
+    compatibility: 'full',
+    skills: ['skills/issues'],
+    mcp: ['api', 'local'],
+    disabled: [],
+  },
+  {
+    name: 'a profile that covers nothing is unsupported',
+    pkg: 'full',
+    profile: 'nothingCovered',
+    strategy: 'unavailable',
+    compatibility: 'unsupported',
+    skills: [],
+    mcp: [],
+    disabled: ['skill:issues', 'mcp:api', 'mcp:local'],
+  },
+  {
+    name: 'a transport the native loader lacks is disabled, and a partial plan is refused',
+    pkg: 'full',
+    profile: 'nativeWithoutHttp',
+    strategy: 'unavailable',
+    compatibility: 'partial',
+    skills: [],
+    mcp: [],
+    disabled: ['mcp:api'],
+  },
+  {
+    name: 'the same package is adopted partially when the caller opts in',
+    pkg: 'full',
+    profile: 'nativeWithoutHttp',
+    allowPartial: true,
+    strategy: 'native-agent-plugin',
+    compatibility: 'partial',
+    skills: ['skills/issues'],
+    mcp: ['local'],
+    disabled: ['mcp:api'],
+  },
+  {
+    name: 'a skills-only package plans natively',
+    pkg: 'skillsOnly',
+    profile: 'native',
+    strategy: 'native-agent-plugin',
+    compatibility: 'full',
+    skills: ['skills/issues'],
+    mcp: [],
+    disabled: [],
+  },
+  {
+    name: 'an mcp-only package plans natively',
+    pkg: 'mcpOnly',
+    profile: 'native',
+    strategy: 'native-agent-plugin',
+    compatibility: 'full',
+    skills: [],
+    mcp: ['api', 'local'],
+    disabled: [],
+  },
+  {
+    name: 'a non-portable extra keeps the package off the native loader',
+    pkg: 'withHooks',
+    profile: 'native',
+    strategy: 'unavailable',
+    compatibility: 'partial',
+    skills: [],
+    mcp: [],
+    disabled: ['hooks'],
+  },
+  {
+    name: 'the same package is adopted partially when the caller opts in',
+    pkg: 'withHooks',
+    profile: 'native',
+    allowPartial: true,
+    strategy: 'component-adapter',
+    compatibility: 'partial',
+    skills: ['skills/issues'],
+    mcp: ['api', 'local'],
+    disabled: ['hooks'],
+  },
+  {
+    name: 'a package with no skills and no servers is unsupported',
+    pkg: 'bare',
+    profile: 'native',
+    strategy: 'unavailable',
+    compatibility: 'unsupported',
+    skills: [],
+    mcp: [],
+    disabled: [],
+  },
+]
+
+describe('the compatibility cases across package and profile capabilities', () => {
+  for (const row of MATRIX) {
+    it(row.name, () => {
+      const pkg = PACKAGES[row.pkg]
+      const plan = createInstallationPlan({
+        pluginId: 'plugin:test:issues',
+        releaseId: `release:${'a'.repeat(64)}`,
+        instanceId: 'workspace-a/user-a',
+        source: {
+          repositoryUrl: 'https://github.com/example/issues',
+          commitSha: 'b'.repeat(40),
+          pluginSubdirectory: '.',
+          contentDigest: pkg.sourceDigest,
+        },
+        package: pkg,
+        profile: PROFILES[row.profile],
+        ...(row.allowPartial === undefined ? {} : { allowPartial: row.allowPartial }),
+      })
+      assert.equal(plan.strategy, row.strategy)
+      assert.equal(plan.compatibility, row.compatibility)
+      assert.deepEqual(plan.selection.skillDirectories, row.skills)
+      assert.deepEqual(Object.keys(plan.selection.mcpServers).toSorted(), row.mcp.toSorted())
+      // The COMPLETE set of disabled components, not a subset.
+      assert.deepEqual(
+        plan.disabled.map((entry) => entry.component).toSorted(),
+        row.disabled.toSorted()
+      )
+      // A refused plan selects nothing, and no plan ever activates by itself.
+      assert.equal(plan.allowedToActivate, false)
+      assert.equal(plan.approvalRequired, true)
+      if (row.strategy === 'unavailable') {
+        assert.deepEqual(plan.selection.skillDirectories, [])
+        assert.deepEqual(plan.selection.mcpServers, {})
+      }
+    })
+  }
+})
+
+describe('upgrade identity isolation', () => {
+  it('isolates instances and plugins, and pins the package identity across upgrades', () => {
+    const base = input()
+    const first = createInstallationPlan(base)
+
+    // A distinct instance of the same plugin owns its own data.
+    assert.notEqual(
+      first.dataKey,
+      createInstallationPlan({ ...base, instanceId: 'workspace-b/user-a' }).dataKey
+    )
+    // A distinct plugin under the same instance id owns its own data.
+    assert.notEqual(
+      first.dataKey,
+      createInstallationPlan({ ...base, pluginId: 'plugin:other:issues' }).dataKey
+    )
+
+    // An upgraded package (new bytes) is a different PACKAGE, under the same
+    // instance data: the data is preserved across the upgrade.
+    const upgraded = createInstallationPlan({
+      ...input(packageFixture({ 'CHANGELOG.md': 'A new release.' })),
+      releaseId: `release:${'c'.repeat(64)}`,
+    })
+    assert.notEqual(first.packageKey, upgraded.packageKey)
+    assert.equal(first.dataKey, upgraded.dataKey)
+    assert.equal(upgraded.preserveDataAcrossUpdates, true)
+
+    // A new release id over the SAME bytes is the same package identity: the
+    // package key pins the source and the package bytes, and the release is
+    // deliberately excluded from the data key.
+    const rereleased = createInstallationPlan({ ...base, releaseId: `release:${'d'.repeat(64)}` })
+    assert.equal(first.packageKey, rereleased.packageKey)
+    assert.equal(first.dataKey, rereleased.dataKey)
+    assert.notEqual(first.releaseId, rereleased.releaseId)
+
+    // A different source commit is a different package identity under the same
+    // instance data.
+    const otherCommit = createInstallationPlan({
+      ...base,
+      source: { ...base.source, commitSha: 'c'.repeat(40) },
+    })
+    assert.notEqual(first.packageKey, otherCommit.packageKey)
+    assert.equal(first.dataKey, otherCommit.dataKey)
+  })
+})

package/src/portable-catalog.test.ts

@@ -1,7 +1,9 @@
 import { it } from 'node:test'
 import assert from 'node:assert/strict'
-import { writeFile, mkdir } from 'node:fs/promises'
+import { existsSync, lstatSync, realpathSync } from 'node:fs'
+import { writeFile, mkdir, readFile, readdir, mkdtemp, symlink, rm, chmod } from 'node:fs/promises'
 import { join } from 'node:path'
+import { tmpdir } from 'node:os'
 import { synchronize, verifyArtifacts, digest } from './index.js'
 import {
   synchronizePortable,
@@ -9,8 +11,17 @@ import {
   PACKAGE_METADATA_KEY,
 } from './portable-catalog.js'
 import { verifyAgentPackage, materializeAgentPackage } from './agent-plugins-catalog.js'
+import { createCatalogInstallationPlan, createInstallationPlan } from './agent-plugins-harness.js'
+import type { HarnessProfile } from './agent-plugins-schema.js'
 import { snapshotFromDirectory } from './index.js'
-import { withPortableFixture } from '../test-support/portable-fixture.js'
+import {
+  copyDependency,
+  nodeCandidates,
+  packageLifecycleScripts,
+  selectPinnedNode,
+  withPackedConsumerFixture,
+  withPortableFixture,
+} from '../test-support/portable-fixture.js'
 
 it('normalizes a real offline catalog and preserves source/release identity', () =>
   withPortableFixture(async (input, root) => {
@@ -184,3 +195,403 @@ it('advertises where it is published once the publication is known', () =>
     // The fixture plugin ships no mark, so the map is present and empty.
     assert.deepEqual(navigation.brandMarks, {})
   }))
+
+/** The capability profile a packed consumer presents to the planner. */
+function harnessProfile(overrides: Partial<HarnessProfile> = {}): HarnessProfile {
+  return {
+    profileVersion: 1,
+    harness: 'example-harness',
+    runtimeVersion: 'fixture-1',
+    adapterVersion: 'fixture-1',
+    agentPlugins: {
+      versions: ['1.0.0'],
+      skills: true,
+      mcpTransports: ['stdio'],
+    },
+    components: { skillDirectories: true, mcpTransports: ['stdio'] },
+    ...overrides,
+  }
+}
+
+it('gives a packed consumer the same installation plan as the direct package path', () =>
+  withPortableFixture(async (input) => {
+    const result = await synchronizePortable(input)
+    const catalog = result.catalog!
+    const plugin = catalog.plugins[0]!
+    const release = plugin.availableReleases[0]!
+    const fromCatalog = createCatalogInstallationPlan({
+      catalog,
+      pluginId: plugin.pluginId,
+      instanceId: 'workspace-a/user-a',
+      profile: harnessProfile(),
+    })
+    const direct = createInstallationPlan({
+      pluginId: plugin.pluginId,
+      releaseId: release.releaseId,
+      instanceId: 'workspace-a/user-a',
+      profile: harnessProfile(),
+      package: release.releaseMetadata[PACKAGE_METADATA_KEY],
+      source: {
+        repositoryUrl: release.resolvedRepositoryUrl,
+        commitSha: release.resolvedCommitSha,
+        pluginSubdirectory: release.pluginSubdirectory,
+        contentDigest: release.canonicalContentDigest,
+      },
+      requiredCredentials: release.requiredCredentials,
+      requiredConnectors: release.requiredConnectors,
+    })
+    // The import path and the direct path must plan the SAME installation.
+    assert.deepEqual(fromCatalog, direct)
+    // The plan is deterministic: the same catalog and profile serialize the
+    // same bytes, every time.
+    const again = createCatalogInstallationPlan({
+      catalog,
+      pluginId: plugin.pluginId,
+      instanceId: 'workspace-a/user-a',
+      profile: harnessProfile(),
+    })
+    assert.equal(JSON.stringify(again), JSON.stringify(fromCatalog))
+    // The upgrade identity: the instance data key is stable and the package
+    // key is pinned to the exact source and package bytes.
+    assert.equal(fromCatalog.dataKey, direct.dataKey)
+    assert.ok(fromCatalog.packageKey.startsWith('packages/'))
+  }))
+
+it('selects the component adapter when the profile does not support the package version', () =>
+  withPortableFixture(async (input) => {
+    const result = await synchronizePortable(input)
+    const catalog = result.catalog!
+    const plugin = catalog.plugins[0]!
+    const release = plugin.availableReleases[0]!
+    const plan = createInstallationPlan({
+      pluginId: plugin.pluginId,
+      releaseId: release.releaseId,
+      instanceId: 'workspace-a/user-a',
+      profile: harnessProfile({
+        agentPlugins: { versions: ['9.9.9'], skills: true, mcpTransports: ['stdio'] },
+      }),
+      package: release.releaseMetadata[PACKAGE_METADATA_KEY],
+      source: {
+        repositoryUrl: release.resolvedRepositoryUrl,
+        commitSha: release.resolvedCommitSha,
+        pluginSubdirectory: release.pluginSubdirectory,
+        contentDigest: release.canonicalContentDigest,
+      },
+    })
+    // The package version is not supported natively, so the adapter plans it.
+    assert.equal(plan.strategy, 'component-adapter')
+    assert.equal(plan.compatibility, 'full')
+    // The same package on a profile that supports its version goes native.
+    const native = createInstallationPlan({
+      pluginId: plugin.pluginId,
+      releaseId: release.releaseId,
+      instanceId: 'workspace-a/user-a',
+      profile: harnessProfile(),
+      package: release.releaseMetadata[PACKAGE_METADATA_KEY],
+      source: {
+        repositoryUrl: release.resolvedRepositoryUrl,
+        commitSha: release.resolvedCommitSha,
+        pluginSubdirectory: release.pluginSubdirectory,
+        contentDigest: release.canonicalContentDigest,
+      },
+    })
+    assert.equal(native.strategy, 'native-agent-plugin')
+  }))
+
+it('refuses a malformed provenance descriptor with one typed line naming the plugin', () =>
+  withPortableFixture(async (input) => {
+    const result = await synchronizePortable(input)
+    const catalog = structuredClone(result.catalog!)
+    const release = catalog.plugins[0]!.availableReleases[0]!
+    release.releaseMetadata[PACKAGE_METADATA_KEY] = { normalizerVersion: 1, files: 'not-an-array' }
+    const { catalogId: _oldId, ...body } = catalog
+    catalog.catalogId = `catalog:${digest(body).slice(7)}`
+    assert.throws(
+      () => verifyPortableCatalog(catalog),
+      (error: Error) => {
+        // One typed line, naming the plugin — the catalog's refusal contract.
+        assert.match(
+          error.message,
+          /^PACKAGE_PROVENANCE_INVALID: plugin:test-source:review-kit \(.+\)$/
+        )
+        assert.equal(error.message.includes('\n'), false)
+        return true
+      }
+    )
+    // The packed consumer's import path refuses it the same way.
+    assert.throws(
+      () =>
+        createCatalogInstallationPlan({
+          catalog,
+          pluginId: catalog.plugins[0]!.pluginId,
+          instanceId: 'workspace-a/user-a',
+          profile: harnessProfile(),
+        }),
+      /PACKAGE_PROVENANCE_INVALID: plugin:test-source:review-kit/
+    )
+  }))
+
+const CONSUMER_SCRIPT = `import { readFileSync } from 'node:fs'
+import { createCatalogInstallationPlan } from '@adea-ai/plugins/agent-plugins/harness'
+import { synchronizePortable } from '@adea-ai/plugins/portable-catalog'
+import { digest } from '@adea-ai/plugins'
+const request = JSON.parse(readFileSync(process.argv[2], 'utf8'))
+const result = await synchronizePortable(request.input)
+let catalog = result.catalog
+if (request.mode === 'malformed') {
+  const copy = structuredClone(catalog)
+  const release = copy.plugins[0].availableReleases[0]
+  release.releaseMetadata.agentPlugins = { normalizerVersion: 1, files: 'not-an-array' }
+  const { catalogId: _oldId, ...body } = copy
+  copy.catalogId = 'catalog:' + digest(body).slice(7)
+  catalog = copy
+}
+try {
+  const plan = createCatalogInstallationPlan({
+    catalog,
+    pluginId: catalog.plugins[0].pluginId,
+    instanceId: request.instanceId,
+    profile: request.profile,
+  })
+  process.stdout.write(
+    JSON.stringify({
+      ok: true,
+      plan,
+      catalogId: result.catalog.catalogId,
+      resolvedHarness: import.meta.resolve('@adea-ai/plugins/agent-plugins/harness'),
+      resolvedCatalog: import.meta.resolve('@adea-ai/plugins/portable-catalog'),
+    })
+  )
+} catch (error) {
+  process.stdout.write(
+    JSON.stringify({ ok: false, error: String(error && error.message ? error.message : error) })
+  )
+}
+`
+
+it('gives a PACKED consumer the same installation plan as the workspace path', () =>
+  withPackedConsumerFixture(async (consumer) => {
+    const source = await synchronizePortable(consumer.input)
+    assert.ok(source.catalog)
+    const sourcePlan = createCatalogInstallationPlan({
+      catalog: source.catalog,
+      pluginId: source.catalog.plugins[0]!.pluginId,
+      instanceId: 'workspace-a/user-a',
+      profile: harnessProfile(),
+    })
+
+    // The consumer imports the package by its PUBLIC specifiers, from its own
+    // directory, and compiles and plans from the packed artifact alone.
+    await writeFile(join(consumer.consumerRoot, 'consume.mjs'), CONSUMER_SCRIPT)
+    const requestPath = join(consumer.consumerRoot, 'request.json')
+    await writeFile(
+      requestPath,
+      JSON.stringify({
+        input: consumer.input,
+        profile: harnessProfile(),
+        instanceId: 'workspace-a/user-a',
+      })
+    )
+    const underNode = consumer.runUnderNode(join(consumer.consumerRoot, 'consume.mjs'), requestPath)
+    assert.equal(underNode.status, 0, underNode.stderr)
+    const nodeResult = JSON.parse(underNode.stdout) as {
+      ok: boolean
+      plan: typeof sourcePlan
+      catalogId: string
+      resolvedHarness: string
+      resolvedCatalog: string
+    }
+    assert.equal(nodeResult.ok, true)
+    // The compiler output is identical across the packaging boundary.
+    assert.equal(nodeResult.catalogId, source.catalog.catalogId)
+    // The import path and the workspace path plan the SAME installation, and
+    // the independently constructed plan serializes to the same bytes: the
+    // determinism claim is about the artifact and about two independent
+    // constructions, not about one in-memory object.
+    assert.deepEqual(nodeResult.plan, sourcePlan)
+    assert.equal(JSON.stringify(nodeResult.plan), JSON.stringify(sourcePlan))
+    // And the plan carries the real content, not an empty one.
+    assert.equal(nodeResult.plan.strategy, 'native-agent-plugin')
+    assert.equal(nodeResult.plan.compatibility, 'full')
+    assert.deepEqual(nodeResult.plan.selection.skillDirectories, ['skills/review'])
+    assert.deepEqual(Object.keys(nodeResult.plan.selection.mcpServers), ['local'])
+    assert.equal(nodeResult.plan.allowedToActivate, false)
+    assert.equal(nodeResult.plan.approvalRequired, true)
+    // The compiled artifact was reached through the PUBLIC specifier: the
+    // resolved module lives in the packed package's dist, not in the
+    // workspace source.
+    assert.ok(nodeResult.resolvedHarness.startsWith('file://' + consumer.consumerRoot))
+    assert.ok(nodeResult.resolvedHarness.includes('@adea-ai/plugins'))
+    assert.ok(nodeResult.resolvedHarness.includes('/dist/'))
+    assert.ok(nodeResult.resolvedCatalog.startsWith('file://' + consumer.consumerRoot))
+    assert.ok(nodeResult.resolvedCatalog.includes('@adea-ai/plugins'))
+    assert.ok(nodeResult.resolvedCatalog.includes('/dist/'))
+
+    // Bun is qualified separately: the package's bun export condition
+    // intentionally selects src/*.ts, so it exercises the source condition and
+    // must still reach the same plan.
+    const underBun = consumer.runUnderBun(join(consumer.consumerRoot, 'consume.mjs'), requestPath)
+    assert.equal(underBun.status, 0, underBun.stderr)
+    const bunResult = JSON.parse(underBun.stdout) as {
+      ok: boolean
+      plan: typeof sourcePlan
+      resolvedHarness: string
+      resolvedCatalog: string
+    }
+    assert.equal(bunResult.ok, true)
+    assert.deepEqual(bunResult.plan, sourcePlan)
+    assert.ok(bunResult.resolvedHarness.startsWith('file://' + consumer.consumerRoot))
+    assert.ok(bunResult.resolvedHarness.includes('@adea-ai/plugins'))
+    assert.ok(bunResult.resolvedHarness.includes('/src/'))
+    assert.ok(bunResult.resolvedCatalog.startsWith('file://' + consumer.consumerRoot))
+    assert.ok(bunResult.resolvedCatalog.includes('@adea-ai/plugins'))
+    assert.ok(bunResult.resolvedCatalog.includes('/src/'))
+  }))
+
+it('keeps the packed consumer inside the packed artifact and its own dependencies', () =>
+  withPackedConsumerFixture(async (consumer) => {
+    // The packed artifact was built from the CURRENT source: a stale build
+    // would still carry the sentinel the rebuild removes.
+    assert.equal(consumer.builtFromCurrentSource, true)
+    assert.equal(existsSync(join(consumer.packedRoot, 'dist', 'agent-plugins-harness.js')), true)
+    // Every copied dependency really resolves INSIDE the consumer: the
+    // workspace installs them as links into the package manager's store, so
+    // a copy that kept the link would resolve outside the consumer.
+    const consumerRoot = realpathSync(consumer.consumerRoot)
+    for (const real of consumer.dependencyRealpaths)
+      assert.ok(real.startsWith(consumerRoot + '/'), `${real} resolves outside the consumer`)
+    assert.ok(consumer.packageRealpath.startsWith(consumerRoot + '/'))
+    // The consumer's dependency closure is the PACKED manifest's own
+    // dependencies, and never the whole workspace.
+    const packedManifest = JSON.parse(
+      await readFile(join(consumer.packedRoot, 'package.json'), 'utf8')
+    ) as { dependencies?: Record<string, string> }
+    const declared = Object.keys(packedManifest.dependencies ?? {})
+    for (const name of declared) assert.ok(consumer.linkedDependencies.includes(name))
+    const installed = await readdir(join(consumer.consumerRoot, 'node_modules'))
+    for (const name of installed) {
+      if (name.startsWith('@')) continue
+      assert.ok(
+        consumer.linkedDependencies.includes(name),
+        `the consumer must not resolve ${name}: it is not a declared dependency`
+      )
+    }
+    // The packing step cannot build: the package declares no lifecycle, and
+    // the workspace prepare only wires git hooks.
+    const packageManifest = JSON.parse(
+      await readFile(join(consumer.packedRoot, 'package.json'), 'utf8')
+    ) as { scripts?: Record<string, string> }
+    const lifecycle = packageLifecycleScripts({ package: packageManifest })
+    assert.deepEqual(lifecycle, {})
+
+    const requestPath = join(consumer.consumerRoot, 'request.json')
+    await writeFile(
+      requestPath,
+      JSON.stringify({
+        input: consumer.input,
+        profile: harnessProfile(),
+        instanceId: 'workspace-a/user-a',
+      })
+    )
+
+    // NEGATIVE CONTROL — a broken export. The consumer resolves the packed
+    // package's OWN exports, so a specifier the packed manifest does not
+    // export must not resolve.
+    const brokenExport = join(consumer.consumerRoot, 'broken-export.mjs')
+    await writeFile(brokenExport, "import '@adea-ai/plugins/not-an-export-of-this-package'\n")
+    const broken = consumer.runUnderNode(brokenExport, requestPath)
+    assert.notEqual(broken.status, 0)
+    assert.match(
+      broken.stderr,
+      /ERR_PACKAGE_PATH_NOT_EXPORTED|ERR_MODULE_NOT_FOUND|Cannot find module/
+    )
+
+    // NEGATIVE CONTROL — an undeclared package. The consumer's install holds
+    // only the packed manifest's declared closure, so a package the workspace
+    // happens to have must NOT resolve from the consumer.
+    const undeclared = join(consumer.consumerRoot, 'undeclared.mjs')
+    await writeFile(undeclared, "import 'oxlint'\n")
+    const undeclaredRun = consumer.runUnderNode(undeclared, requestPath)
+    assert.notEqual(undeclaredRun.status, 0)
+    assert.match(undeclaredRun.stderr, /ERR_MODULE_NOT_FOUND|Cannot find module/)
+  }))
+
+it('refuses a malformed provenance descriptor for a PACKED consumer too', () =>
+  withPackedConsumerFixture(async (consumer) => {
+    await writeFile(join(consumer.consumerRoot, 'consume.mjs'), CONSUMER_SCRIPT)
+    const requestPath = join(consumer.consumerRoot, 'request.json')
+    await writeFile(
+      requestPath,
+      JSON.stringify({
+        mode: 'malformed',
+        input: consumer.input,
+        profile: harnessProfile(),
+        instanceId: 'workspace-a/user-a',
+      })
+    )
+    const underNode = consumer.runUnderNode(join(consumer.consumerRoot, 'consume.mjs'), requestPath)
+    assert.equal(underNode.status, 0, underNode.stderr)
+    const result = JSON.parse(underNode.stdout) as { ok: boolean; error?: string }
+    assert.equal(result.ok, false)
+    // One typed line, naming the plugin — the catalog's refusal contract.
+    assert.match(
+      result.error ?? '',
+      /^PACKAGE_PROVENANCE_INVALID: plugin:test-source:review-kit \(.+\)$/
+    )
+    assert.equal((result.error ?? '').includes('\n'), false)
+  }))
+
+it('copies a symlinked dependency as self-contained content', async () => {
+  // The workspace installs the package's dependencies as SYMLINKS into the
+  // package manager's store, and a recursive copy keeps a link as a link.
+  // The consumer must receive the CONTENT, and the copy must resolve inside
+  // the consumer.
+  const workspace = await mkdtemp(join(tmpdir(), 'adea-symlink-dependency-'))
+  try {
+    const real = join(workspace, 'real-pkg')
+    await mkdir(real)
+    await writeFile(
+      join(real, 'package.json'),
+      JSON.stringify({ name: 'real-pkg', version: '1.0.0' })
+    )
+    const link = join(workspace, 'linked-pkg')
+    await symlink(real, link)
+    const consumer = join(workspace, 'consumer')
+    await mkdir(consumer, { recursive: true })
+
+    const copied = await copyDependency(link, 'linked-pkg', consumer)
+    // The copy is a real directory, not a link.
+    assert.equal(lstatSync(copied.path).isSymbolicLink(), false)
+    // And it resolves inside the consumer, not at the workspace's target.
+    assert.ok(copied.realpath.startsWith(realpathSync(consumer) + '/'))
+    assert.notEqual(copied.realpath, realpathSync(real))
+    // The workspace's own link is untouched.
+    assert.equal(lstatSync(link).isSymbolicLink(), true)
+  } finally {
+    await rm(workspace, { recursive: true, force: true })
+  }
+})
+
+it('qualifies the compiled artifact only on Node 24', async () => {
+  // The qualification exists because the package's `bun` export condition
+  // selects src/*.ts: a Node that is not 24 would change WHICH artifact is
+  // under test, so it is not a candidate.
+  const directory = await mkdtemp(join(tmpdir(), 'adea-node-candidate-'))
+  try {
+    const node24 = join(directory, 'node24')
+    const node20 = join(directory, 'node20')
+    await writeFile(node24, '#!/bin/sh\necho v24.21.0\n')
+    await writeFile(node20, '#!/bin/sh\necho v20.11.0\n')
+    await chmod(node24, 0o755)
+    await chmod(node20, 0o755)
+    assert.equal(selectPinnedNode([node20, node24]), node24)
+    assert.throws(() => selectPinnedNode([node20]), /needs Node 24/)
+    assert.throws(() => selectPinnedNode([]), /needs Node 24/)
+    // The discovery ends with the `node` on PATH, which is where a CI
+    // runner's pinned setup action puts Node 24.
+    const candidates = nodeCandidates()
+    assert.ok(candidates.includes('node'))
+  } finally {
+    await rm(directory, { recursive: true, force: true })
+  }
+})

package/src/portable-catalog.ts

@@ -168,6 +168,26 @@ export async function synchronizePortable(options: SyncInput): Promise<SyncResul
   }
 }
 
+/**
+ * A single-line summary of why a release's package descriptor was refused.
+ *
+ * The schema's own failure is a structured issue list; the catalog's refusal
+ * contract is one typed line. The first issue is kept as the detail, because
+ * it names the field that was wrong.
+ */
+function describeProvenanceFailure(error: unknown): string {
+  const issues = (error as { issues?: unknown }).issues
+  if (Array.isArray(issues) && issues.length > 0) {
+    const first = issues[0] as { path?: unknown; message?: unknown }
+    const path = Array.isArray(first.path) ? first.path.join('.') : ''
+    const message = typeof first.message === 'string' ? first.message : ''
+    return [path, message].filter(Boolean).join(': ').replace(/\s+/g, ' ').slice(0, 200)
+  }
+  return error instanceof Error
+    ? error.message.replace(/\s+/g, ' ').slice(0, 200)
+    : 'the descriptor is not a package recipe'
+}
+
 export function verifyPortableCatalog(catalog: Catalog, requirePortable = false): void {
   const { catalogId, ...body } = CatalogSchema.parse(catalog)
   if (catalogId !== `catalog:${digest(body).slice(7)}`) throw new Error('CATALOG_ID_MISMATCH')
@@ -189,7 +209,20 @@ export function verifyPortableCatalog(catalog: Catalog, requirePortable = false)
           throw new Error(`PORTABLE_RESYNC_REQUIRED: ${plugin.pluginId}`)
         continue
       }
-      const pkg = verifyAgentPackage(descriptor)
+      let pkg: ReturnType<typeof verifyAgentPackage>
+      try {
+        pkg = verifyAgentPackage(descriptor)
+      } catch (error) {
+        // A consumer imports a catalog it did not compile, so a malformed
+        // provenance descriptor is an IMPORT failure, and it must be refused
+        // the way every other failure here is refused: one typed, single-line
+        // reason that names the plugin. The schema's own multi-line issue
+        // dump is not a refusal a consumer can match on.
+        throw new Error(
+          `PACKAGE_PROVENANCE_INVALID: ${plugin.pluginId} (${describeProvenanceFailure(error)})`,
+          { cause: error }
+        )
+      }
       if (
         release.contentResolution !== 'complete' ||
         pkg.sourceDigest !== release.canonicalContentDigest