@adea-ai/plugins 3.0.10 → 4.0.1

package/dist/display-name.js

@@ -136,7 +136,8 @@ const FULL_NAMES = {
  */
 export function normalizeDisplayName(value) {
     const trimmed = value.trim();
-    const known = FULL_NAMES[trimmed.toLowerCase()];
+    const fullNameKey = trimmed.toLowerCase();
+    const known = Object.hasOwn(FULL_NAMES, fullNameKey) ? FULL_NAMES[fullNameKey] : undefined;
     if (known !== undefined)
         return known;
     const tokens = trimmed.split(/[-_\s]+/u).filter(Boolean);
@@ -145,7 +146,7 @@ export function normalizeDisplayName(value) {
     return tokens
         .map((token, index) => {
         const key = token.toLowerCase();
-        const brand = BRAND_TOKENS[key];
+        const brand = Object.hasOwn(BRAND_TOKENS, key) ? BRAND_TOKENS[key] : undefined;
         if (brand !== undefined)
             return brand;
         // Any uppercase means the vendor already chose a casing.

package/dist/display-name.js.map

@@ -1 +1 @@
-{"version":3,"file":"display-name.js","sourceRoot":"","sources":["../src/display-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,YAAY,GAAqC;IACrD,UAAU,EAAE,UAAU;IACtB,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,IAAI;IACR,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,aAAa;IACzB,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,YAAY;IACxB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,KAAK;IACV,WAAW,EAAE,aAAa;IAC1B,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,aAAa,EAAE,iBAAiB;IAChC,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;IACtB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,cAAc;IAC3B,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,YAAY;IACjB,SAAS,EAAE,WAAW;IACtB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,WAAW;IACtB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,EAAE,EAAE,IAAI;IACR,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,iBAAiB;IAC3B,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,WAAW;IACtB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,EAAE,EAAE,IAAI;IACR,GAAG,EAAE,KAAK;IACV,EAAE,EAAE,IAAI;IACR,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,SAAS;CACnB,CAAA;AAED,4EAA4E;AAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,GAAG;IACH,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,MAAM;CACP,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,UAAU,GAAqC;IACnD,aAAa,EAAE,aAAa;IAC5B,aAAa,EAAE,aAAa;IAC5B,YAAY,EAAE,YAAY;IAC1B,IAAI,EAAE,MAAM;CACb,CAAA;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACpB,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;QAC/B,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACrC,yDAAyD;QACzD,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QACvC,IAAI,KAAK,GAAG,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAA;QACjD,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAA;AACd,CAAC"}
+{"version":3,"file":"display-name.js","sourceRoot":"","sources":["../src/display-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,YAAY,GAAqC;IACrD,UAAU,EAAE,UAAU;IACtB,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,IAAI;IACR,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,aAAa;IACzB,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,YAAY;IACxB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,KAAK;IACV,WAAW,EAAE,aAAa;IAC1B,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,aAAa,EAAE,iBAAiB;IAChC,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;IACtB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,cAAc;IAC3B,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,YAAY;IACjB,SAAS,EAAE,WAAW;IACtB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,WAAW;IACtB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,EAAE,EAAE,IAAI;IACR,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,iBAAiB;IAC3B,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,WAAW;IACtB,GAAG,EAAE,KAAK;IACV,UAAU,EAAE,YAAY;IACxB,EAAE,EAAE,IAAI;IACR,GAAG,EAAE,KAAK;IACV,EAAE,EAAE,IAAI;IACR,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,SAAS;CACnB,CAAA;AAED,4EAA4E;AAC5E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,GAAG;IACH,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,MAAM;CACP,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,UAAU,GAAqC;IACnD,aAAa,EAAE,aAAa;IAC5B,aAAa,EAAE,aAAa;IAC5B,YAAY,EAAE,YAAY;IAC1B,IAAI,EAAE,MAAM;CACb,CAAA;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAA;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1F,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACpB,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC9E,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACrC,yDAAyD;QACzD,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QACvC,IAAI,KAAK,GAAG,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAA;QACjD,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9D,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAA;AACd,CAAC"}

package/dist/harness.d.ts

@@ -1,13 +1,54 @@
-import { type Catalog, type Harness, type MaterializationPlan } from './schema.js';
-export declare class MaterializationError extends Error {
-    readonly code: string;
-    readonly details: readonly string[];
-    constructor(code: string, details?: readonly string[]);
+import { type HarnessProfile, type McpServer, type InstallationPlan } from './agent-plugins-schema.js';
+import type { Catalog } from './schema.js';
+export interface InstallationInput {
+    readonly pluginId: string;
+    readonly releaseId: string;
+    readonly instanceId: string;
+    readonly source: InstallationPlan['source'];
+    readonly package: unknown;
+    readonly profile: HarnessProfile;
+    readonly requiredCredentials?: readonly string[];
+    readonly requiredConnectors?: readonly string[];
+    readonly allowPartial?: boolean;
 }
-export declare function createMaterializationPlan(input: {
+export interface CatalogInstallationInput {
     readonly catalog: Catalog;
     readonly pluginId: string;
-    readonly harness: Harness;
     readonly releaseId?: string;
-}): MaterializationPlan;
-export declare function supportedHarnesses(): readonly Harness[];
+    readonly instanceId: string;
+    readonly profile: HarnessProfile;
+    readonly allowPartial?: boolean;
+}
+/** Resolve the exact catalog release before planning. The caller must also authenticate
+ * the catalog publisher and verify its artifact integrity before invoking this API.
+ */
+export declare function createCatalogInstallationPlan(input: CatalogInstallationInput): InstallationPlan;
+/** A declarative proposal, never an execution grant. No brand-based support assumptions. */
+export declare function createInstallationPlan(input: InstallationInput): InstallationPlan;
+export interface RuntimeRoots {
+    readonly pluginRoot: string;
+    readonly pluginData: string;
+}
+/** Exact, single-pass expansion. Replacement text is never scanned recursively. */
+export declare function expandPluginPaths(value: string, roots: RuntimeRoots): string;
+export type McpBinding = {
+    type: 'stdio';
+    command: string;
+    args: string[];
+    cwd: string;
+    env: Record<string, string>;
+    shell: false;
+} | {
+    type: 'streamable-http' | 'sse';
+    url: string;
+    headers: Record<string, string>;
+    redirectPolicy: 'same-origin';
+    authorization: 'control-plane';
+};
+/** Produce concrete Control Plane launch/connect descriptors, without launching or connecting. */
+export declare function resolveMcpBinding(input: McpServer, roots: RuntimeRoots, baseEnv?: Readonly<Record<string, string>>, platform?: 'posix' | 'win32'): McpBinding;
+/** Mandatory filesystem preflight for Control Plane callers after safe materialization.
+ * Call immediately before activation inside the same protected installation boundary;
+ * a separate preflight is not a substitute for preventing concurrent filesystem mutation.
+ */
+export declare function verifyBindingPaths(input: McpServer, roots: RuntimeRoots): Promise<void>;

package/dist/harness.js

@@ -1,169 +1,212 @@
-import { HarnessSchema, MaterializationPlanSchema, } from './schema.js';
-export class MaterializationError extends Error {
-    code;
-    details;
-    constructor(code, details = []) {
-        super(`${code}${details.length ? `: ${details.join(', ')}` : ''}`);
-        this.code = code;
-        this.details = details;
-        this.name = 'MaterializationError';
-    }
-}
-export function createMaterializationPlan(input) {
-    const plugin = input.catalog.plugins.find((candidate) => candidate.pluginId === input.pluginId);
+import { isAbsolute, resolve, relative, sep } from 'node:path';
+import { realpath } from 'node:fs/promises';
+import { createHash } from 'node:crypto';
+import { HarnessProfileSchema, InstallationPlanSchema, } from './agent-plugins-schema.js';
+import { verifyPortableCatalog, PACKAGE_METADATA_KEY } from './portable-catalog.js';
+import { verifyAgentPackage, validateServer } from './agent-plugins-catalog.js';
+/** Resolve the exact catalog release before planning. The caller must also authenticate
+ * the catalog publisher and verify its artifact integrity before invoking this API.
+ */
+export function createCatalogInstallationPlan(input) {
+    verifyPortableCatalog(input.catalog);
+    const plugin = input.catalog.plugins.find((entry) => entry.pluginId === input.pluginId);
     if (!plugin)
-        throw new MaterializationError('PLUGIN_NOT_FOUND', [input.pluginId]);
-    const release = plugin.availableReleases.find((candidate) => candidate.releaseId === (input.releaseId ?? plugin.currentReleaseId));
+        throw new Error(`PLUGIN_NOT_FOUND: ${input.pluginId}`);
+    const release = plugin.availableReleases.find((entry) => entry.releaseId === (input.releaseId ?? plugin.currentReleaseId));
     if (!release)
-        throw new MaterializationError('RELEASE_NOT_FOUND', [
-            input.releaseId ?? plugin.currentReleaseId,
-        ]);
-    const compatibility = plugin.harnessCompatibility[input.harness];
-    if (!compatibility)
-        throw new MaterializationError('HARNESS_UNSUPPORTED', [input.harness]);
-    return MaterializationPlanSchema.parse({
-        planVersion: 1,
+        throw new Error('RELEASE_NOT_FOUND');
+    if (release.contentResolution !== 'complete')
+        throw new Error('COMPLETE_SOURCE_REQUIRED');
+    const pkg = release.releaseMetadata[PACKAGE_METADATA_KEY];
+    if (pkg === undefined)
+        throw new Error('PORTABLE_RESYNC_REQUIRED: run a full catalog sync before planning portable installation');
+    return createInstallationPlan({
         pluginId: plugin.pluginId,
         releaseId: release.releaseId,
-        harness: input.harness,
+        instanceId: input.instanceId,
+        profile: input.profile,
+        package: pkg,
+        allowPartial: input.allowPartial === true,
         source: {
             repositoryUrl: release.resolvedRepositoryUrl,
             commitSha: release.resolvedCommitSha,
             pluginSubdirectory: release.pluginSubdirectory,
             contentDigest: release.canonicalContentDigest,
         },
-        targetLayout: targetLayout(input.harness),
-        files: release.fileIndex
-            .map((sourcePath) => filePlan(release, sourcePath, input.harness, compatibility.status))
-            .toSorted((left, right) => left.targetPath.localeCompare(right.targetPath) ||
-            left.sourcePath.localeCompare(right.sourcePath)),
-        configuration: {
-            compatibilityStatus: compatibility.status,
-            sourceDialect: release.releaseMetadata.sourceDialect ?? 'unknown',
-            executeInstallation: false,
-        },
-        requiredConnectors: release.requiredConnectors,
         requiredCredentials: release.requiredCredentials,
-        policyConstraints: [
-            'This plan describes files and translation only; it does not install or execute upstream code.',
-            ...release.permissionSensitiveChanges.map((type) => `Control Plane must authorize ${type} capability explicitly.`),
-        ],
+        requiredConnectors: release.requiredConnectors,
     });
 }
-function targetLayout(harness) {
-    switch (harness) {
-        case 'codex':
-            return {
-                root: '.agents',
-                notes: [
-                    'Skills and instructions map to the Codex .agents layout.',
-                    'MCP and executable capabilities require Control Plane policy.',
-                ],
-            };
-        case 'claude-code':
-            return {
-                root: '.claude',
-                notes: [
-                    'Claude Code-native files can be copied when the source dialect is Claude.',
-                    'Hooks and MCP configuration still require explicit runtime authorization.',
-                ],
-            };
-        case 'cursor':
-            return {
-                root: '.cursor',
-                notes: [
-                    'Cursor rules and skills map to the .cursor layout.',
-                    'MCP configuration is declarative and is not executed by this plan.',
-                ],
-            };
-        case 'pi':
-            return {
-                root: '.pi',
-                notes: [
-                    'Pi receives portable SKILL.md and MCP metadata only.',
-                    'No Pi process or package lifecycle is invoked.',
-                ],
-            };
-        case 'hermes':
-            return {
-                root: '.hermes',
-                notes: [
-                    'Hermes receives portable skill and MCP metadata only.',
-                    'Harness-specific translation remains explicit in each file action.',
-                ],
-            };
-        case 'opencode':
-            return {
-                root: '.opencode',
-                notes: [
-                    'OpenCode receives portable instruction and MCP metadata only.',
-                    'Executable capabilities are excluded.',
-                ],
-            };
-        case 'generic-skill-mcp':
-            return {
-                root: '.agent',
-                notes: ['Generic SKILL.md and MCP-compatible files are copied when recognized.'],
-            };
-    }
+function identity(...parts) {
+    return createHash('sha256').update(JSON.stringify(parts)).digest('hex');
 }
-function filePlan(release, sourcePath, harness, status) {
-    const type = capabilityTypeForPath(release, sourcePath);
-    const directory = sourcePath.includes('/') ? sourcePath.slice(0, sourcePath.lastIndexOf('/')) : '';
-    if (status === 'unsupported' || type === 'executable' || type === 'unknown') {
-        return {
-            sourcePath,
-            targetPath: sourcePath,
-            action: 'unsupported',
-            reason: `${type} capability is not executable through a materialization plan.`,
-        };
+/** A declarative proposal, never an execution grant. No brand-based support assumptions. */
+export function createInstallationPlan(input) {
+    const profile = HarnessProfileSchema.parse(input.profile);
+    const pkg = verifyAgentPackage(input.package);
+    if (pkg.sourceDigest !== input.source.contentDigest)
+        throw new Error('Package recipe does not match the selected immutable release.');
+    if (!input.instanceId || input.instanceId.length > 256)
+        throw new Error('A stable installation instanceId is required.');
+    const disabled = [];
+    for (const item of pkg.nonPortable)
+        disabled.push({ component: item.kind, reason: item.reason });
+    for (const item of pkg.diagnostics.filter((entry) => entry.severity === 'error'))
+        disabled.push({ component: item.path, reason: item.message });
+    const nativeEligible = profile.agentPlugins.versions.includes(pkg.specVersion) &&
+        pkg.nonPortable.length === 0 &&
+        !Object.keys(pkg.manifest?.extensions ?? {}).length;
+    const nativeCoverage = (profile.agentPlugins.skills ? pkg.skills.length : 0) +
+        Object.values(pkg.mcpServers).filter((server) => profile.agentPlugins.mcpTransports.includes(server.type)).length;
+    const adapterCoverage = (profile.components.skillDirectories ? pkg.skills.length : 0) +
+        Object.values(pkg.mcpServers).filter((server) => profile.components.mcpTransports.includes(server.type)).length;
+    const native = nativeEligible && nativeCoverage > 0 && nativeCoverage >= adapterCoverage;
+    const strategy = pkg.status === 'unavailable'
+        ? 'unavailable'
+        : native
+            ? 'native-agent-plugin'
+            : 'component-adapter';
+    let skillDirectories = [];
+    const servers = new Map();
+    if (strategy !== 'unavailable') {
+        if (native ? profile.agentPlugins.skills : profile.components.skillDirectories)
+            skillDirectories = pkg.skills.map((skill) => skill.path);
+        else
+            for (const skill of pkg.skills)
+                disabled.push({
+                    component: `skill:${skill.name}`,
+                    reason: 'The selected adapter cannot expose skill directories.',
+                });
+        for (const [name, server] of Object.entries(pkg.mcpServers)) {
+            if ((native ? profile.agentPlugins.mcpTransports : profile.components.mcpTransports).includes(server.type))
+                servers.set(name, server);
+            else
+                disabled.push({
+                    component: `mcp:${name}`,
+                    reason: `No ${server.type} MCP binding on this harness adapter.`,
+                });
+        }
     }
-    if (type === 'hook' ||
-        type === 'browser' ||
-        type === 'scheduled-task' ||
-        type === 'ui-component') {
+    const hasContent = skillDirectories.length > 0 || servers.size > 0;
+    const compatibility = !hasContent ? 'unsupported' : disabled.length > 0 ? 'partial' : 'full';
+    const selectedStrategy = !hasContent || (compatibility === 'partial' && !input.allowPartial) ? 'unavailable' : strategy;
+    return InstallationPlanSchema.parse({
+        planVersion: 2,
+        pluginId: input.pluginId,
+        releaseId: input.releaseId,
+        instanceId: input.instanceId,
+        profile,
+        source: input.source,
+        package: pkg,
+        // Git source identity also pins executable modes, which the v1 byte snapshot omits.
+        packageKey: pkg.packageDigest
+            ? `packages/${identity(input.source.repositoryUrl, input.source.commitSha, input.source.pluginSubdirectory, pkg.packageDigest)}`
+            : '',
+        // Deliberately excludes release, package digest and harness. Switching harnesses or updating
+        // the same approved instance preserves data; distinct scopes use distinct instance IDs.
+        dataKey: `instances/${identity(input.pluginId, input.instanceId)}`,
+        preserveDataAcrossUpdates: true,
+        strategy: selectedStrategy,
+        compatibility,
+        allowedToActivate: false,
+        approvalRequired: true,
+        selection: selectedStrategy === 'unavailable'
+            ? { skillDirectories: [], mcpServers: {} }
+            : { skillDirectories, mcpServers: Object.fromEntries(servers) },
+        disabled,
+        requiredCredentials: [...(input.requiredCredentials ?? [])],
+        requiredConnectors: [...(input.requiredConnectors ?? [])],
+        preconditions: [
+            'Verify catalog integrity/provenance and exact source digest before applying the package recipe.',
+            'Use an immutable package root; preserve source file modes and complete skill directories/resources.',
+            'Create a writable data directory for this instance; never key it by release or copy credentials between instances.',
+            'Control Plane must authorize activation, filesystem/network access, executables and credential bindings.',
+            'Recheck the actual harness/runtime/adapter profile and realpath containment immediately before activation.',
+            'Native mode registers exactly one package root. Component mode registers only the selected skill directories and MCP bindings, never legacy hooks/config files.',
+            'Do not install dependencies or run lifecycle scripts implicitly; review required executables and skill compatibility requirements.',
+            'Skill allowed-tools metadata is advisory and never grants permission.',
+            'Namespace registrations by installation identity; detect skill/server name collisions instead of overwriting existing harness configuration.',
+            'Remote authorization is client-managed. Do not expand remote URLs/headers or forward configured headers to another origin without authorization.',
+        ],
+    });
+}
+/** Exact, single-pass expansion. Replacement text is never scanned recursively. */
+export function expandPluginPaths(value, roots) {
+    return value.replace(/\$\{(PLUGIN_ROOT|PLUGIN_DATA)\}/g, (_match, name) => name === 'PLUGIN_ROOT' ? roots.pluginRoot : roots.pluginData);
+}
+function within(path, root) {
+    const suffix = relative(root, path);
+    return suffix === '' || (suffix !== '..' && !suffix.startsWith(`..${sep}`) && !isAbsolute(suffix));
+}
+/** Produce concrete Control Plane launch/connect descriptors, without launching or connecting. */
+export function resolveMcpBinding(input, roots, baseEnv = {}, platform = process.platform === 'win32' ? 'win32' : 'posix') {
+    const server = validateServer(input);
+    if (!isAbsolute(roots.pluginRoot) || !isAbsolute(roots.pluginData))
+        throw new Error('Runtime plugin roots must be absolute paths.');
+    if (server.type !== 'stdio')
         return {
-            sourcePath,
-            targetPath: sourcePath,
-            action: 'ignore',
-            reason: `${type} is cataloged but has no portable target layout for ${harness}.`,
+            type: server.type,
+            url: server.url,
+            headers: { ...server.headers },
+            redirectPolicy: 'same-origin',
+            authorization: 'control-plane',
         };
-    }
-    const targetPath = targetForType(type, sourcePath, directory, harness);
-    const action = type === 'skill' || type === 'rule' || (type === 'mcp-server' && status === 'native')
-        ? 'copy'
-        : 'translate';
+    const command = server.command.startsWith('./')
+        ? resolve(roots.pluginRoot, server.command)
+        : server.command;
+    if (server.command.startsWith('./') && !within(command, roots.pluginRoot))
+        throw new Error('Executable escapes the plugin root.');
+    const cwdInput = server.cwd ?? '${PLUGIN_ROOT}';
+    const cwdRoot = cwdInput.startsWith('${PLUGIN_DATA}') ? roots.pluginData : roots.pluginRoot;
+    const expanded = expandPluginPaths(cwdInput, roots);
+    const cwd = resolve(roots.pluginRoot, expanded);
+    if (!within(cwd, cwdRoot))
+        throw new Error('Working directory escapes its declared root.');
+    const env = {};
+    const overlay = (name, value) => {
+        if (platform === 'win32')
+            for (const existing of Object.keys(env))
+                if (existing.toUpperCase() === name.toUpperCase())
+                    delete env[existing];
+        Object.defineProperty(env, name, {
+            value,
+            enumerable: true,
+            configurable: true,
+            writable: true,
+        });
+    };
+    for (const [key, value] of Object.entries(baseEnv))
+        overlay(key, value);
+    for (const [key, value] of Object.entries(server.env ?? {}))
+        overlay(key, expandPluginPaths(value, roots));
+    overlay('PLUGIN_ROOT', roots.pluginRoot);
+    overlay('PLUGIN_DATA', roots.pluginData);
     return {
-        sourcePath,
-        targetPath,
-        action: action,
-        reason: action === 'copy'
-            ? `Copy recognized ${type} content.`
-            : `Translate ${type} metadata into the ${harness} layout.`,
+        type: 'stdio',
+        command,
+        args: (server.args ?? []).map((arg) => expandPluginPaths(arg, roots)),
+        cwd,
+        env,
+        shell: false,
     };
 }
-function capabilityTypeForPath(release, path) {
-    const match = release.capabilities.find((capability) => capability.paths.includes(path));
-    return match?.type ?? 'unknown';
-}
-function targetForType(type, path, directory, harness) {
-    if (type === 'skill')
-        return `${targetLayout(harness).root}/skills/${directory || basenameWithoutExtension(path)}/${path.endsWith('SKILL.md') ? 'SKILL.md' : basenameWithoutExtension(path)}`;
-    if (type === 'rule')
-        return `${targetLayout(harness).root}/rules/${basenameWithoutExtension(path)}.md`;
-    if (type === 'command')
-        return `${targetLayout(harness).root}/commands/${basenameWithoutExtension(path)}.md`;
-    if (type === 'agent')
-        return `${targetLayout(harness).root}/agents/${basenameWithoutExtension(path)}.md`;
-    if (type === 'mcp-server')
-        return `${targetLayout(harness).root}/mcp/${basenameWithoutExtension(path)}.json`;
-    return `${targetLayout(harness).root}/${path}`;
-}
-function basenameWithoutExtension(path) {
-    const basename = path.split('/').at(-1) ?? path;
-    return basename.replace(/\.[^.]+$/, '');
-}
-export function supportedHarnesses() {
-    return HarnessSchema.options;
+/** Mandatory filesystem preflight for Control Plane callers after safe materialization.
+ * Call immediately before activation inside the same protected installation boundary;
+ * a separate preflight is not a substitute for preventing concurrent filesystem mutation.
+ */
+export async function verifyBindingPaths(input, roots) {
+    const binding = resolveMcpBinding(input, roots);
+    if (binding.type !== 'stdio' || input.type !== 'stdio')
+        return;
+    const root = await realpath(roots.pluginRoot);
+    const data = await realpath(roots.pluginData);
+    if (root !== roots.pluginRoot || data !== roots.pluginData)
+        throw new Error('Supply canonical filesystem-resolved runtime roots.');
+    const cwd = await realpath(binding.cwd);
+    const expected = input.cwd?.startsWith('${PLUGIN_DATA}') ? data : root;
+    if (!within(cwd, expected))
+        throw new Error('Working directory resolves outside its declared root.');
+    if (input.command.startsWith('./') && !within(await realpath(binding.command), root))
+        throw new Error('Executable resolves outside the package root.');
 }
 //# sourceMappingURL=harness.js.map

package/dist/harness.js.map

@@ -1 +1 @@
-{"version":3,"file":"harness.js","sourceRoot":"","sources":["../src/harness.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,yBAAyB,GAM1B,MAAM,aAAa,CAAA;AAEpB,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAElC,IAAI;IACJ,OAAO;IAFlB,YACW,IAAY,EACZ,OAAO,GAAsB,EAAE;QAExC,KAAK,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;oBAHzD,IAAI;uBACJ,OAAO;QAGhB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;IACpC,CAAC;CACF;AAED,MAAM,UAAU,yBAAyB,CAAC,KAKzC;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC/F,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;IACjF,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAC3C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,gBAAgB,CAAC,CACpF,CAAA;IACD,IAAI,CAAC,OAAO;QACV,MAAM,IAAI,oBAAoB,CAAC,mBAAmB,EAAE;YAClD,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,gBAAgB;SAC3C,CAAC,CAAA;IACJ,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAChE,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,oBAAoB,CAAC,qBAAqB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;IAC1F,OAAO,yBAAyB,CAAC,KAAK,CAAC;QACrC,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE;YACN,aAAa,EAAE,OAAO,CAAC,qBAAqB;YAC5C,SAAS,EAAE,OAAO,CAAC,iBAAiB;YACpC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,aAAa,EAAE,OAAO,CAAC,sBAAsB;SAC9C;QACD,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC;QACzC,KAAK,EAAE,OAAO,CAAC,SAAS;aACrB,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;aACvF,QAAQ,CACP,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/C,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAClD;QACH,aAAa,EAAE;YACb,mBAAmB,EAAE,aAAa,CAAC,MAAM;YACzC,aAAa,EAAE,OAAO,CAAC,eAAe,CAAC,aAAa,IAAI,SAAS;YACjE,mBAAmB,EAAE,KAAK;SAC3B;QACD,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,iBAAiB,EAAE;YACjB,+FAA+F;YAC/F,GAAG,OAAO,CAAC,0BAA0B,CAAC,GAAG,CACvC,CAAC,IAAI,EAAE,EAAE,CAAC,gCAAgC,IAAI,yBAAyB,CACxE;SACF;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB;IACpC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO;YACV,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE;oBACL,0DAA0D;oBAC1D,+DAA+D;iBAChE;aACF,CAAA;QACH,KAAK,aAAa;YAChB,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE;oBACL,2EAA2E;oBAC3E,2EAA2E;iBAC5E;aACF,CAAA;QACH,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE;oBACL,oDAAoD;oBACpD,oEAAoE;iBACrE;aACF,CAAA;QACH,KAAK,IAAI;YACP,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE;oBACL,sDAAsD;oBACtD,gDAAgD;iBACjD;aACF,CAAA;QACH,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE;oBACL,uDAAuD;oBACvD,oEAAoE;iBACrE;aACF,CAAA;QACH,KAAK,UAAU;YACb,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE;oBACL,+DAA+D;oBAC/D,uCAAuC;iBACxC;aACF,CAAA;QACH,KAAK,mBAAmB;YACtB,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,CAAC,uEAAuE,CAAC;aACjF,CAAA;IACL,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,OAAsB,EACtB,UAAkB,EAClB,OAAgB,EAChB,MAAyD;IAEzD,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IACvD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAClG,IAAI,MAAM,KAAK,aAAa,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5E,OAAO;YACL,UAAU;YACV,UAAU,EAAE,UAAU;YACtB,MAAM,EAAE,aAAsB;YAC9B,MAAM,EAAE,GAAG,IAAI,+DAA+D;SAC/E,CAAA;IACH,CAAC;IACD,IACE,IAAI,KAAK,MAAM;QACf,IAAI,KAAK,SAAS;QAClB,IAAI,KAAK,gBAAgB;QACzB,IAAI,KAAK,cAAc,EACvB,CAAC;QACD,OAAO;YACL,UAAU;YACV,UAAU,EAAE,UAAU;YACtB,MAAM,EAAE,QAAiB;YACzB,MAAM,EAAE,GAAG,IAAI,uDAAuD,OAAO,GAAG;SACjF,CAAA;IACH,CAAC;IACD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;IACtE,MAAM,MAAM,GACV,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,KAAK,QAAQ,CAAC;QACnF,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,WAAW,CAAA;IACjB,OAAO;QACL,UAAU;QACV,UAAU;QACV,MAAM,EAAE,MAA8B;QACtC,MAAM,EACJ,MAAM,KAAK,MAAM;YACf,CAAC,CAAC,mBAAmB,IAAI,WAAW;YACpC,CAAC,CAAC,aAAa,IAAI,sBAAsB,OAAO,UAAU;KAC/D,CAAA;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAsB,EAAE,IAAY;IACjE,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IACxF,OAAO,KAAK,EAAE,IAAI,IAAI,SAAS,CAAA;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,SAAiB,EAAE,OAAgB;IACpF,IAAI,IAAI,KAAK,OAAO;QAClB,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,WAAW,SAAS,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAA;IACzK,IAAI,IAAI,KAAK,MAAM;QACjB,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,UAAU,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAA;IACnF,IAAI,IAAI,KAAK,SAAS;QACpB,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,aAAa,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAA;IACtF,IAAI,IAAI,KAAK,OAAO;QAClB,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,WAAW,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAA;IACpF,IAAI,IAAI,KAAK,YAAY;QACvB,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,QAAQ,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAA;IACnF,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAA;AAChD,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;IAC/C,OAAO,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,aAAa,CAAC,OAAO,CAAA;AAC9B,CAAC"}
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../src/harness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EACL,oBAAoB,EACpB,sBAAsB,GAIvB,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AACnF,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAsB/E;;GAEG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAA+B;IAC3E,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAA;IACvF,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAA;IACnE,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAC3C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAC5E,CAAA;IACD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;IAClD,IAAI,OAAO,CAAC,iBAAiB,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IACzF,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAA;IACzD,IAAI,GAAG,KAAK,SAAS;QACnB,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAA;IACH,OAAO,sBAAsB,CAAC;QAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,GAAG;QACZ,YAAY,EAAE,KAAK,CAAC,YAAY,KAAK,IAAI;QACzC,MAAM,EAAE;YACN,aAAa,EAAE,OAAO,CAAC,qBAAqB;YAC5C,SAAS,EAAE,OAAO,CAAC,iBAAiB;YACpC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,aAAa,EAAE,OAAO,CAAC,sBAAsB;SAC9C;QACD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;KAC/C,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAG,KAAe;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzE,CAAC;AACD,4FAA4F;AAC5F,MAAM,UAAU,sBAAsB,CAAC,KAAwB;IAC7D,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACzD,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC7C,IAAI,GAAG,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC,aAAa;QACjD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;IAClF,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG;QACpD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAiC,EAAE,CAAA;IACjD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,WAAW;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAChG,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC9E,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;IAE/D,MAAM,cAAc,GAClB,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;QACvD,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAC5B,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAA;IACrD,MAAM,cAAc,GAClB,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAC9C,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CACzD,CAAC,MAAM,CAAA;IACV,MAAM,eAAe,GACnB,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAC9C,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CACvD,CAAC,MAAM,CAAA;IACV,MAAM,MAAM,GAAG,cAAc,IAAI,cAAc,GAAG,CAAC,IAAI,cAAc,IAAI,eAAe,CAAA;IACxF,MAAM,QAAQ,GACZ,GAAG,CAAC,MAAM,KAAK,aAAa;QAC1B,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,MAAM;YACN,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,mBAAmB,CAAA;IAC3B,IAAI,gBAAgB,GAAa,EAAE,CAAA;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAA;IAC5C,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB;YAC5E,gBAAgB,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;;YAExD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM;gBAC5B,QAAQ,CAAC,IAAI,CAAC;oBACZ,SAAS,EAAE,SAAS,KAAK,CAAC,IAAI,EAAE;oBAChC,MAAM,EAAE,uDAAuD;iBAChE,CAAC,CAAA;QACN,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5D,IACE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,QAAQ,CACvF,MAAM,CAAC,IAAI,CACZ;gBAED,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;;gBAEzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,SAAS,EAAE,OAAO,IAAI,EAAE;oBACxB,MAAM,EAAE,MAAM,MAAM,CAAC,IAAI,uCAAuC;iBACjE,CAAC,CAAA;QACN,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,CAAA;IAClE,MAAM,aAAa,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;IAC5F,MAAM,gBAAgB,GACpB,CAAC,UAAU,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAA;IAChG,OAAO,sBAAsB,CAAC,KAAK,CAAC;QAClC,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO;QACP,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,GAAG;QACZ,oFAAoF;QACpF,UAAU,EAAE,GAAG,CAAC,aAAa;YAC3B,CAAC,CAAC,YAAY,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE;YAChI,CAAC,CAAC,EAAE;QACN,6FAA6F;QAC7F,wFAAwF;QACxF,OAAO,EAAE,aAAa,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;QAClE,yBAAyB,EAAE,IAAI;QAC/B,QAAQ,EAAE,gBAAgB;QAC1B,aAAa;QACb,iBAAiB,EAAE,KAAK;QACxB,gBAAgB,EAAE,IAAI;QACtB,SAAS,EACP,gBAAgB,KAAK,aAAa;YAChC,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;YAC1C,CAAC,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE;QACnE,QAAQ;QACR,mBAAmB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QAC3D,kBAAkB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACzD,aAAa,EAAE;YACb,iGAAiG;YACjG,qGAAqG;YACrG,oHAAoH;YACpH,0GAA0G;YAC1G,4GAA4G;YAC5G,iKAAiK;YACjK,oIAAoI;YACpI,uEAAuE;YACvE,8IAA8I;YAC9I,kJAAkJ;SACnJ;KACF,CAAC,CAAA;AACJ,CAAC;AAMD,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,KAAmB;IAClE,OAAO,KAAK,CAAC,OAAO,CAAC,kCAAkC,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAChF,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAC7D,CAAA;AACH,CAAC;AACD,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACnC,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;AACpG,CAAC;AAkBD,kGAAkG;AAClG,MAAM,UAAU,iBAAiB,CAC/B,KAAgB,EAChB,KAAmB,EACnB,OAAO,GAAqC,EAAE,EAC9C,QAAQ,GAAsB,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;IAE9E,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACjE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QACzB,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE;YAC9B,cAAc,EAAE,aAAa;YAC7B,aAAa,EAAE,eAAe;SAC/B,CAAA;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAC7C,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC;QAC3C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAA;IAClB,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,IAAI,gBAAgB,CAAA;IAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAA;IAC3F,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IAC/C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IAC1F,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,KAAa,EAAQ,EAAE;QACpD,IAAI,QAAQ,KAAK,OAAO;YACtB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBACrC,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE;oBAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC3E,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE;YAC/B,KAAK;YACL,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAA;IACJ,CAAC,CAAA;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACvE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACzD,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;IAC/C,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IACxC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IACxC,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO;QACP,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrE,GAAG;QACH,GAAG;QACH,KAAK,EAAE,KAAK;KACb,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAgB,EAAE,KAAmB;IAC5E,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAM;IAC9D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC7C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC7C,IAAI,IAAI,KAAK,KAAK,CAAC,UAAU,IAAI,IAAI,KAAK,KAAK,CAAC,UAAU;QACxD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IACtE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;AACpE,CAAC"}

package/dist/icon-mirror.d.ts

@@ -40,8 +40,8 @@ export interface IconMirrorResult {
 }
 /**
  * Maps every mirrored icon back to the exact commit it was resolved from, by
- * matching the digest the product advertises. Canonical variants are inspected
- * first, mirroring the order product records were built in.
+ * matching the digest the product advertises. Retain each distinct pinned
+ * origin so the mirror can try another source if one is unavailable.
  */
 export declare function resolveIconSources(catalog: Pick<Catalog, 'plugins'>, index: ConsumerIndex): readonly IconSource[];
 /**