@adea-ai/plugins 4.0.0 → 4.0.6

package/dist/plugin-release.js

@@ -0,0 +1,321 @@
+import { byteDigest, digest, sourceDigest } from './digest.js';
+import { capabilitySummary, classifyCapabilities, createCompatibility, createSecurity, } from './capabilities.js';
+import { normalizeDisplayName } from './display-name.js';
+import { stageIconBytes } from './icon-mirror.js';
+import { iconAssetName, iconOverrideFor, inspectIconBytes, selectIconPath, } from './icons.js';
+import { arrayValue, isString, stringValue } from './json-values.js';
+import { PluginSafetyError } from './plugin-skips.js';
+import { isVendorHomepage, resolveSiteIcon } from './site-icons.js';
+import { resolvePluginSource, } from './source-resolution.js';
+import { canonicalRepositoryUrl, parseJsonDocument, safeRelativePath, } from './sources.js';
+import { normalizeCategory, productGroupingKey, stablePluginId, stableReleaseId, } from './taxonomy.js';
+import { createSiteIconFetcher, SITE_FETCH_TIMEOUT_MS } from './upstream.js';
+/**
+ * Marks the catalog format this compiler emits.
+ *
+ * Bumping or first introducing this value makes a synchronization replay its
+ * verified pins and rebuild, which is how a format change reaches the published
+ * catalog when no upstream source has moved. It is deliberately separate from
+ * the agent-package normalizer version, which describes package normalization
+ * and would misreport a change here.
+ */
+export const CATALOG_CONTRACT_VERSION = 'adea-catalog/3';
+export async function normalizePlugin(source, entry, input) {
+    const { policy } = input;
+    const resolved = await resolvePluginSource(entry.name, entry.source, source, input.resolveExternalRefs);
+    const snapshot = input.metadataOnly
+        ? { files: new Map(), symlinks: [] }
+        : await input.snapshotLoader.load(resolved.repositoryUrl, resolved.commitSha, resolved.subdirectory);
+    if (snapshot.symlinks.length > 0)
+        throw new PluginSafetyError('SYMLINK_ESCAPE', [...snapshot.symlinks].toSorted());
+    validateSnapshot(snapshot, policy, entry.name);
+    const contentDigest = input.metadataOnly
+        ? digest({
+            repositoryUrl: resolved.repositoryUrl,
+            subdirectory: resolved.subdirectory,
+            commitSha: resolved.commitSha,
+            entryDigest: entry.entryDigest,
+        })
+        : sourceDigest(snapshot.files);
+    const pluginManifest = findPluginManifest(snapshot);
+    const manifestDigest = pluginManifest ? digest(pluginManifest.metadata) : entry.entryDigest;
+    const capabilities = classifyCapabilities(snapshot.files, pluginManifest?.metadata, policy);
+    const iconOverride = iconOverrideFor(input.productIconOverrides, productGroupingKey(entry.name, input.productAliases));
+    const contentIcon = resolveContentIcon(snapshot, iconOverride, input.metadataOnly);
+    const favicon = contentIcon === undefined
+        ? await resolveFavicon({
+            entry,
+            iconOverride,
+            metadataOnly: input.metadataOnly,
+            live: input.resolveExternalRefs,
+        })
+        : undefined;
+    // Stage the mark while its bytes are in hand. Publication then needs no
+    // re-fetch, and a site icon cannot drift between resolution and release.
+    const mark = contentIcon
+        ? { ...contentIcon, bytes: snapshot.files.get(contentIcon.path) }
+        : favicon;
+    if (input.iconAssetsDirectory && mark?.bytes)
+        await stageIconBytes(input.iconAssetsDirectory, iconAssetName(mark.digest, mark.contentType), mark.bytes);
+    const releaseId = stableReleaseId(resolved.repositoryUrl, resolved.subdirectory, resolved.commitSha, contentDigest);
+    const originalRelease = createRelease({
+        source,
+        entry,
+        resolved,
+        contentDigest,
+        manifestDigest,
+        capabilities,
+        snapshot,
+        ...(pluginManifest ? { pluginManifest } : {}),
+        releaseId,
+        ...(contentIcon ? { contentIcon } : {}),
+        ...(favicon ? { favicon } : {}),
+        metadataOnly: input.metadataOnly,
+    });
+    const release = input.transformRelease && !input.metadataOnly
+        ? input.transformRelease(originalRelease, snapshot, entry.name)
+        : originalRelease;
+    const compatibility = input.releaseCompatibility?.(release) ??
+        createCompatibility(source.config.marketplaceDialect, capabilities, policy);
+    const security = createSecurity(capabilities, policy, input.metadataOnly);
+    const normalizedCategories = entry.categories.map((category) => normalizeCategory(category, input.categoryMap));
+    const productCategory = input.productCategories?.[entry.name];
+    const categories = [
+        ...new Set((productCategory
+            ? [productCategory, ...normalizedCategories.filter((category) => category !== 'other')]
+            : normalizedCategories.length > 0
+                ? normalizedCategories
+                : [input.categoryMap.fallback]).filter(Boolean)),
+    ].toSorted();
+    // The name a list renders: marketplace manifests are inconsistent (`Gmail`
+    // beside `zapier` beside `aws-agents-for-devsecops`), so the catalog
+    // publishes the written form once and every consumer shows the same thing.
+    const displayName = normalizeDisplayName(entry.displayName ?? pluginManifest?.displayName ?? entry.name);
+    const authors = entry.authors.length > 0
+        ? [...entry.authors]
+        : source.parsed.owner.length > 0
+            ? [...source.parsed.owner]
+            : ['Unknown'];
+    const keywords = [...new Set([...entry.keywords, ...entry.name.split(/[-_\s]+/g), ...categories])]
+        .filter(Boolean)
+        .toSorted();
+    const provenance = {
+        sourceId: source.config.sourceId,
+        repositoryUrl: canonicalRepositoryUrl(source.config.repositoryUrl),
+        manifestPath: source.config.manifestPath,
+        pluginSubdirectory: resolved.subdirectory || '.',
+        resolvedCommitSha: resolved.commitSha,
+        sourceManifestDigest: source.manifestDigest,
+        upstreamEntryDigest: entry.entryDigest,
+    };
+    return {
+        pluginId: stablePluginId(source.config.sourceId, entry.name),
+        displayName,
+        description: entry.description || pluginManifest?.description || '',
+        productGroupingKey: productGroupingKey(entry.name, input.productAliases),
+        categories,
+        keywords,
+        authors,
+        ...(entry.homepage ? { homepage: entry.homepage } : {}),
+        icons: entry.icons.length > 0 ? [...entry.icons].toSorted() : (pluginManifest?.icons ?? []),
+        sourceId: source.config.sourceId,
+        upstreamPluginName: entry.name,
+        currentReleaseId: releaseId,
+        availableReleases: [release],
+        capabilitySummary: capabilitySummary(capabilities),
+        harnessCompatibility: compatibility,
+        license: findLicense(entry, pluginManifest?.metadata),
+        provenance,
+        securityClassification: security,
+    };
+}
+function createRelease(input) {
+    const requiredCredentials = new Set();
+    const auth = input.entry.policy.authentication;
+    if (typeof auth === 'string' && auth !== 'NONE' && auth !== 'DISABLED')
+        requiredCredentials.add('authentication');
+    for (const value of arrayValue(input.entry.raw.requiredCredentials))
+        if (typeof value === 'string')
+            requiredCredentials.add(value);
+    const requiredConnectors = [
+        ...new Set(arrayValue(input.entry.raw.connectors).filter(isString)),
+    ].toSorted();
+    const permissionSensitiveChanges = input.capabilities
+        .filter((capability) => capability.securityImpact === 'sensitive')
+        .map((capability) => capability.type)
+        .toSorted();
+    const metadata = {
+        catalogContract: CATALOG_CONTRACT_VERSION,
+        marketplaceEntry: input.entry.raw,
+        ...(input.pluginManifest ? { pluginManifest: input.pluginManifest.metadata } : {}),
+        sourceDialect: input.source.config.marketplaceDialect,
+    };
+    const version = input.pluginManifest?.version ?? stringValue(input.entry.raw.version);
+    return {
+        releaseId: input.releaseId,
+        ...(version ? { upstreamVersion: version } : {}),
+        resolvedRepositoryUrl: input.resolved.repositoryUrl,
+        resolvedCommitSha: input.resolved.commitSha,
+        pluginSubdirectory: input.resolved.subdirectory || '.',
+        canonicalContentDigest: input.contentDigest,
+        manifestDigest: input.manifestDigest,
+        contentResolution: input.metadataOnly ? 'metadata-only' : 'complete',
+        releaseMetadata: metadata,
+        capabilities: [...input.capabilities].toSorted((left, right) => left.type.localeCompare(right.type) || left.name.localeCompare(right.name)),
+        requiredConnectors,
+        requiredCredentials: [...requiredCredentials].toSorted(),
+        permissionSensitiveChanges: [...new Set(permissionSensitiveChanges)],
+        fileIndex: [...input.snapshot.files.keys()].toSorted(),
+        publicationTimestamp: input.source.retrievedAt,
+        ...assembleIcon(input),
+    };
+}
+/**
+ * Resolves the product site's icon, for a plugin whose content ships no mark.
+ *
+ * Only a live build with complete content attempts this: a metadata-only or
+ * offline run must not reach out to vendor sites, and neither may a product the
+ * curator has already decided about.
+ */
+async function resolveFavicon(input) {
+    if (!input.live || input.metadataOnly)
+        return undefined;
+    if (input.iconOverride?.forced === null || input.iconOverride?.forced)
+        return undefined;
+    const homepage = input.iconOverride?.site ?? input.entry.homepage;
+    if (!isVendorHomepage(homepage))
+        return undefined;
+    // Bound both fetches: a vendor site that never answers must not stall a
+    // catalogue build. A timeout simply leaves the product on its monogram.
+    const signal = AbortSignal.timeout(SITE_FETCH_TIMEOUT_MS);
+    const resolved = await resolveSiteIcon(homepage, createSiteIconFetcher(signal));
+    return 'contentType' in resolved ? resolved : undefined;
+}
+/**
+ * Picks and vets the brand mark for a release.
+ *
+ * A file in the plugin's own content is preferred, because it is the mark the
+ * vendor ships with the plugin. When the content has none, a live build falls
+ * back to the declared homepage's site icon: many plugins are a thin wrapper
+ * over a vendor API and point at the vendor's site rather than shipping a logo.
+ * Whatever the source, an icon that fails inspection is absent rather than
+ * advertised: the catalog never publishes content it would refuse to mirror.
+ */
+function resolveContentIcon(snapshot, iconOverride, metadataOnly) {
+    if (metadataOnly || snapshot.files.size === 0)
+        return undefined;
+    // A curator override wins over every rule, including "publish no icon".
+    if (iconOverride?.forced === null)
+        return undefined;
+    const files = [...snapshot.files.keys()].toSorted();
+    const forced = iconOverride?.forced;
+    if (forced && !files.includes(forced))
+        return undefined;
+    const path = forced ?? selectIconPath(files);
+    if (!path)
+        return undefined;
+    const bytes = snapshot.files.get(path);
+    if (!bytes)
+        return undefined;
+    const inspected = inspectIconBytes(bytes);
+    if (!('contentType' in inspected))
+        return undefined;
+    return {
+        kind: 'content',
+        path,
+        contentType: inspected.contentType,
+        digest: byteDigest(bytes),
+        bytes: bytes.byteLength,
+    };
+}
+function assembleIcon(input) {
+    if (input.contentIcon)
+        return { icon: input.contentIcon };
+    if (input.favicon)
+        return {
+            icon: {
+                kind: 'favicon',
+                url: input.favicon.url,
+                homepage: input.favicon.homepage,
+                contentType: input.favicon.contentType,
+                digest: input.favicon.digest,
+                bytes: input.favicon.bytes.byteLength,
+            },
+        };
+    return {};
+}
+function validateSnapshot(snapshot, policy, pluginName) {
+    if (snapshot.files.size > policy.maxFilesPerPlugin)
+        throw new PluginSafetyError('PLUGIN_TOO_MANY_FILES', [pluginName]);
+    let total = 0;
+    for (const [path, bytes] of snapshot.files) {
+        try {
+            safeRelativePath(path, 'SNAPSHOT_PATH_INVALID');
+        }
+        catch {
+            throw new PluginSafetyError('SNAPSHOT_PATH_INVALID', [path]);
+        }
+        if (bytes.byteLength > policy.maxFileBytes)
+            throw new PluginSafetyError('PLUGIN_FILE_TOO_LARGE', [path]);
+        total += bytes.byteLength;
+    }
+    if (total > policy.maxBytesPerPlugin)
+        throw new PluginSafetyError('PLUGIN_TOO_LARGE', [pluginName]);
+}
+function findPluginManifest(snapshot) {
+    const candidates = [...snapshot.files.keys()]
+        .filter((path) => {
+        const lower = path.toLocaleLowerCase();
+        return lower === 'plugin.json' || lower.endsWith('/plugin.json') || lower === 'package.json';
+    })
+        .toSorted((left, right) => manifestRank(left) - manifestRank(right) || left.localeCompare(right));
+    const path = candidates[0];
+    if (!path)
+        return undefined;
+    try {
+        const bytes = snapshot.files.get(path);
+        if (!bytes)
+            return undefined;
+        const metadata = parseJsonDocument(new TextDecoder().decode(bytes));
+        return {
+            metadata,
+            ...((stringValue(metadata.displayName) ?? stringValue(metadata.name))
+                ? { displayName: stringValue(metadata.displayName) ?? stringValue(metadata.name) }
+                : {}),
+            ...(stringValue(metadata.description)
+                ? { description: stringValue(metadata.description) }
+                : {}),
+            ...(stringValue(metadata.version) ? { version: stringValue(metadata.version) } : {}),
+            icons: [metadata.icon, ...(Array.isArray(metadata.icons) ? metadata.icons : [])]
+                .filter(isString)
+                .toSorted(),
+        };
+    }
+    catch {
+        throw new PluginSafetyError('PLUGIN_MANIFEST_INVALID', [path]);
+    }
+}
+function manifestRank(path) {
+    // A root manifest is the plugin's own declaration and outranks harness copies.
+    if (path === 'plugin.json')
+        return -1;
+    const lower = path.toLocaleLowerCase();
+    if (lower.endsWith('/.claude-plugin/plugin.json'))
+        return 0;
+    if (lower.endsWith('/.cursor-plugin/plugin.json'))
+        return 1;
+    if (lower.endsWith('/.agents/plugin.json'))
+        return 2;
+    return lower === 'plugin.json' ? 3 : 4;
+}
+function findLicense(entry, metadata) {
+    const candidate = stringValue(metadata?.license) ?? stringValue(entry.raw.license);
+    if (!candidate)
+        return { name: 'Unknown', source: 'unknown' };
+    return {
+        name: candidate,
+        ...(candidate.startsWith('http') ? { url: candidate } : {}),
+        source: metadata?.license !== undefined ? 'plugin-manifest' : 'marketplace-entry',
+    };
+}
+//# sourceMappingURL=plugin-release.js.map

package/dist/plugin-release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-release.js","sourceRoot":"","sources":["../src/plugin-release.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC9D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,GACf,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EACL,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,cAAc,GAEf,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAWrD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAiB,MAAM,iBAAiB,CAAA;AAElF,OAAO,EACL,mBAAmB,GAGpB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,GAEjB,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,eAAe,GAGhB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAE5E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,gBAAgB,CAAA;AA+BxD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAsB,EACtB,KAA6B,EAC7B,KAAqB;IAErB,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACxB,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,MAAM,EACZ,MAAM,EACN,KAAK,CAAC,mBAAmB,CAC1B,CAAA;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY;QACjC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,EAAsB,EAAE,QAAQ,EAAE,EAAE,EAAE;QACxD,CAAC,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,IAAI,CAC7B,QAAQ,CAAC,aAAa,EACtB,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,YAAY,CACtB,CAAA;IACL,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC9B,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;IAClF,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,YAAY;QACtC,CAAC,CAAC,MAAM,CAAC;YACL,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;QACJ,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAChC,MAAM,cAAc,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IACnD,MAAM,cAAc,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAA;IAC3F,MAAM,YAAY,GAAG,oBAAoB,CAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC3F,MAAM,YAAY,GAAG,eAAe,CAClC,KAAK,CAAC,oBAAoB,EAC1B,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC,CACrD,CAAA;IACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CAAA;IAClF,MAAM,OAAO,GACX,WAAW,KAAK,SAAS;QACvB,CAAC,CAAC,MAAM,cAAc,CAAC;YACnB,KAAK;YACL,YAAY;YACZ,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI,EAAE,KAAK,CAAC,mBAAmB;SAChC,CAAC;QACJ,CAAC,CAAC,SAAS,CAAA;IACf,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,IAAI,GAAG,WAAW;QACtB,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;QACjE,CAAC,CAAC,OAAO,CAAA;IACX,IAAI,KAAK,CAAC,mBAAmB,IAAI,IAAI,EAAE,KAAK;QAC1C,MAAM,cAAc,CAClB,KAAK,CAAC,mBAAmB,EACzB,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,EAC5C,IAAI,CAAC,KAAK,CACX,CAAA;IACH,MAAM,SAAS,GAAG,eAAe,CAC/B,QAAQ,CAAC,aAAa,EACtB,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,SAAS,EAClB,aAAa,CACd,CAAA;IACD,MAAM,eAAe,GAAG,aAAa,CAAC;QACpC,MAAM;QACN,KAAK;QACL,QAAQ;QACR,aAAa;QACb,cAAc;QACd,YAAY;QACZ,QAAQ;QACR,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,SAAS;QACT,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAA;IACF,MAAM,OAAO,GACX,KAAK,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,YAAY;QAC3C,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,eAAe,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;QAC/D,CAAC,CAAC,eAAe,CAAA;IACrB,MAAM,aAAa,GACjB,KAAK,CAAC,oBAAoB,EAAE,CAAC,OAAO,CAAC;QACrC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,YAAY,EAAE,MAAM,CAAC,CAAA;IAC7E,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAA;IACzE,MAAM,oBAAoB,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC7D,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAC/C,CAAA;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,iBAAiB,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC7D,MAAM,UAAU,GAAG;QACjB,GAAG,IAAI,GAAG,CACR,CAAC,eAAe;YACd,CAAC,CAAC,CAAC,eAAe,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;YACvF,CAAC,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC;gBAC/B,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CACjC,CAAC,MAAM,CAAC,OAAO,CAAC,CAClB;KACF,CAAC,QAAQ,EAAE,CAAA;IACZ,2EAA2E;IAC3E,qEAAqE;IACrE,2EAA2E;IAC3E,MAAM,WAAW,GAAG,oBAAoB,CACtC,KAAK,CAAC,WAAW,IAAI,cAAc,EAAE,WAAW,IAAI,KAAK,CAAC,IAAI,CAC/D,CAAA;IACD,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;QACpB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAC9B,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAC1B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACnB,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC;SAC/F,MAAM,CAAC,OAAO,CAAC;SACf,QAAQ,EAAE,CAAA;IACb,MAAM,UAAU,GAAqB;QACnC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;QAChC,aAAa,EAAE,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QAClE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY;QACxC,kBAAkB,EAAE,QAAQ,CAAC,YAAY,IAAI,GAAG;QAChD,iBAAiB,EAAE,QAAQ,CAAC,SAAS;QACrC,oBAAoB,EAAE,MAAM,CAAC,cAAc;QAC3C,mBAAmB,EAAE,KAAK,CAAC,WAAW;KACvC,CAAA;IACD,OAAO;QACL,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;QAC5D,WAAW;QACX,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,cAAc,EAAE,WAAW,IAAI,EAAE;QACnE,kBAAkB,EAAE,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC;QACxE,UAAU;QACV,QAAQ;QACR,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;QAC3F,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;QAChC,kBAAkB,EAAE,KAAK,CAAC,IAAI;QAC9B,gBAAgB,EAAE,SAAS;QAC3B,iBAAiB,EAAE,CAAC,OAAO,CAAC;QAC5B,iBAAiB,EAAE,iBAAiB,CAAC,YAAY,CAAC;QAClD,oBAAoB,EAAE,aAAa;QACnC,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC;QACrD,UAAU;QACV,sBAAsB,EAAE,QAAQ;KACjC,CAAA;AACH,CAAC;AAiBD,SAAS,aAAa,CAAC,KAAyB;IAC9C,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAA;IAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU;QACpE,mBAAmB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC3C,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACjE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAC/D,MAAM,kBAAkB,GAAG;QACzB,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;KACpE,CAAC,QAAQ,EAAE,CAAA;IACZ,MAAM,0BAA0B,GAAG,KAAK,CAAC,YAAY;SAClD,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,KAAK,WAAW,CAAC;SACjE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;SACpC,QAAQ,EAAE,CAAA;IACb,MAAM,QAAQ,GAA4B;QACxC,eAAe,EAAE,wBAAwB;QACzC,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG;QACjC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB;KACtD,CAAA;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,EAAE,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACrF,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,qBAAqB,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;QACnD,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;QAC3C,kBAAkB,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY,IAAI,GAAG;QACtD,sBAAsB,EAAE,KAAK,CAAC,aAAa;QAC3C,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,iBAAiB,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU;QACpE,eAAe,EAAE,QAAQ;QACzB,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,QAAQ,CAC5C,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAC5F;QACD,kBAAkB;QAClB,mBAAmB,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC,QAAQ,EAAE;QACxD,0BAA0B,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACpE,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;QACtD,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;QAC9C,GAAG,YAAY,CAAC,KAAK,CAAC;KACvB,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,cAAc,CAAC,KAK7B;IACC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,YAAY;QAAE,OAAO,SAAS,CAAA;IACvD,IAAI,KAAK,CAAC,YAAY,EAAE,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,EAAE,MAAM;QAAE,OAAO,SAAS,CAAA;IACvF,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAA;IACjE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAA;IACjD,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,QAAS,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAA;IAChF,OAAO,aAAa,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;AACzD,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CACzB,QAAkB,EAClB,YAAsC,EACtC,YAAqB;IAErB,IAAI,YAAY,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC/D,wEAAwE;IACxE,IAAI,YAAY,EAAE,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACnD,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;IACnD,MAAM,MAAM,GAAG,YAAY,EAAE,MAAM,CAAA;IACnC,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IACvD,MAAM,IAAI,GAAG,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,CAAA;IAC5C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAA;IAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IACzC,IAAI,CAAC,CAAC,aAAa,IAAI,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IACnD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI;QACJ,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC;QACzB,KAAK,EAAE,KAAK,CAAC,UAAU;KACxB,CAAA;AACH,CAAC;AAKD,SAAS,YAAY,CACnB,KAA0D;IAE1D,IAAI,KAAK,CAAC,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,CAAA;IACzD,IAAI,KAAK,CAAC,OAAO;QACf,OAAO;YACL,IAAI,EAAE;gBACJ,IAAI,EAAE,SAAS;gBACf,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;gBACtB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;gBAChC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;gBACtC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;gBAC5B,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU;aACtC;SACF,CAAA;IACH,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAkB,EAAE,MAAqB,EAAE,UAAkB;IACrF,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,iBAAiB;QAChD,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IACpE,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAA;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9D,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,YAAY;YACxC,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;QAC9D,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;IAC3B,CAAC;IACD,IAAI,KAAK,GAAG,MAAM,CAAC,iBAAiB;QAClC,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;AACjE,CAAC;AAUD,SAAS,kBAAkB,CAAC,QAAkB;IAC5C,MAAM,UAAU,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC1C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACtC,OAAO,KAAK,KAAK,aAAa,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,KAAK,KAAK,cAAc,CAAA;IAC9F,CAAC,CAAC;SACD,QAAQ,CACP,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CACvF,CAAA;IACH,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;IAC1B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAA;IAC3B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAA;QAC5B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAA4B,CAAA;QAC9F,OAAO;YACL,QAAQ;YACR,GAAG,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACnE,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;gBAClF,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACnC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iBAC7E,MAAM,CAAC,QAAQ,CAAC;iBAChB,QAAQ,EAAE;SACd,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IAChE,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,+EAA+E;IAC/E,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,CAAC,CAAC,CAAA;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAA;IACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QAAE,OAAO,CAAC,CAAA;IAC3D,IAAI,KAAK,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QAAE,OAAO,CAAC,CAAA;IAC3D,IAAI,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAAE,OAAO,CAAC,CAAA;IACpD,OAAO,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,WAAW,CAClB,KAA6B,EAC7B,QAAkC;IAElC,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClF,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAC7D,OAAO;QACL,IAAI,EAAE,SAAS;QACf,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,EAAE,QAAQ,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB;KAClF,CAAA;AACH,CAAC"}

package/dist/plugin-skips.d.ts

@@ -0,0 +1,19 @@
+import type { MarketplacePluginEntry } from './sources.js';
+import type { ResolvedSource } from './source-resolution.js';
+export type PluginSkipReasonCode = 'GIT_SUBMODULE_UNSUPPORTED' | 'PLUGIN_FILE_TOO_LARGE' | 'PLUGIN_FILE_UNAVAILABLE' | 'PLUGIN_MANIFEST_INVALID' | 'PLUGIN_PATH_NOT_FOUND' | 'PLUGIN_SCHEMA_INVALID' | 'PLUGIN_SIZE_POLICY' | 'PLUGIN_SOURCE_UNAVAILABLE' | 'PLUGIN_TOO_LARGE' | 'PLUGIN_TOO_MANY_FILES' | 'SNAPSHOT_PATH_INVALID' | 'SYMLINK_ESCAPE';
+export interface SkippedPlugin {
+    readonly sourceId: string;
+    readonly pluginId: string;
+    readonly pluginName: string;
+    readonly reasonCode: PluginSkipReasonCode;
+    readonly securityReason: string;
+    readonly incompleteContent: true;
+    readonly paths: readonly string[];
+}
+export declare class PluginSafetyError extends Error {
+    readonly reasonCode: PluginSkipReasonCode;
+    readonly paths: readonly string[];
+    constructor(reasonCode: PluginSkipReasonCode, paths: readonly string[]);
+}
+export declare function createSkippedPlugin(source: ResolvedSource, entry: MarketplacePluginEntry, error: unknown): SkippedPlugin | undefined;
+export declare const UPSTREAM_WEATHER_SKIP_CODES: ReadonlySet<PluginSkipReasonCode>;

package/dist/plugin-skips.js

@@ -0,0 +1,65 @@
+import { stablePluginId } from './taxonomy.js';
+export class PluginSafetyError extends Error {
+    reasonCode;
+    paths;
+    constructor(reasonCode, paths) {
+        super(`${reasonCode}${paths.length > 0 ? `: ${paths.join(',')}` : ''}`);
+        this.reasonCode = reasonCode;
+        this.paths = paths;
+        this.name = 'PluginSafetyError';
+    }
+}
+const pluginSkipReasons = {
+    GIT_SUBMODULE_UNSUPPORTED: 'The plugin contains a Git submodule, so the catalog excludes it rather than traversing an unpinned repository boundary.',
+    PLUGIN_FILE_TOO_LARGE: 'The plugin contains a file over the configured size limit, so the catalog excludes the plugin before publication.',
+    PLUGIN_FILE_UNAVAILABLE: 'A plugin file could not be fetched from upstream after retries, so the catalog excludes the plugin rather than publishing partial content.',
+    PLUGIN_MANIFEST_INVALID: 'The plugin manifest is malformed, so the catalog excludes the plugin before consuming its metadata.',
+    PLUGIN_PATH_NOT_FOUND: 'The declared plugin path does not exist at the pinned commit, so the catalog excludes the plugin.',
+    PLUGIN_SCHEMA_INVALID: 'The normalized plugin record exceeds the published catalog schema, so the catalog excludes it before publication.',
+    PLUGIN_SIZE_POLICY: 'The plugin exceeds the configured size policy, so the catalog excludes it before publication.',
+    PLUGIN_SOURCE_UNAVAILABLE: 'The plugin repository tree could not be fetched from upstream after retries, so the catalog excludes the plugin rather than publishing partial content.',
+    PLUGIN_TOO_LARGE: 'The plugin exceeds the configured aggregate size limit, so the catalog excludes it before publication.',
+    PLUGIN_TOO_MANY_FILES: 'The plugin exceeds the configured file-count limit, so the catalog excludes it before publication.',
+    SNAPSHOT_PATH_INVALID: 'The plugin snapshot contains an unsafe path, so the catalog excludes it rather than allowing repository escape.',
+    SYMLINK_ESCAPE: 'The plugin snapshot contains symlinks; symlinks are never followed, so the catalog excludes the plugin.',
+};
+export function createSkippedPlugin(source, entry, error) {
+    const parsed = error instanceof PluginSafetyError
+        ? { reasonCode: error.reasonCode, paths: error.paths }
+        : parsePluginSafetyError(error);
+    if (!parsed)
+        return undefined;
+    return {
+        sourceId: source.config.sourceId,
+        pluginId: stablePluginId(source.config.sourceId, entry.name),
+        pluginName: entry.name,
+        reasonCode: parsed.reasonCode,
+        securityReason: pluginSkipReasons[parsed.reasonCode],
+        incompleteContent: true,
+        paths: [...new Set(parsed.paths)].toSorted(),
+    };
+}
+function parsePluginSafetyError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    const match = /^([A-Z_]+)(?::\s?(.*))?$/.exec(message);
+    if (!match)
+        return undefined;
+    const reasonCode = match[1];
+    if (!(reasonCode in pluginSkipReasons))
+        return undefined;
+    return {
+        reasonCode,
+        paths: match[2]
+            ? match[2]
+                .split(',')
+                .map((path) => path.trim())
+                .filter(Boolean)
+            : [],
+    };
+}
+export const UPSTREAM_WEATHER_SKIP_CODES = new Set([
+    'PLUGIN_SOURCE_UNAVAILABLE',
+    'PLUGIN_FILE_UNAVAILABLE',
+    'PLUGIN_PATH_NOT_FOUND',
+]);
+//# sourceMappingURL=plugin-skips.js.map

package/dist/plugin-skips.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-skips.js","sourceRoot":"","sources":["../src/plugin-skips.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AA0B9C,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAE/B,UAAU;IACV,KAAK;IAFhB,YACW,UAAgC,EAChC,KAAwB;QAEjC,KAAK,CAAC,GAAG,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;0BAH9D,UAAU;qBACV,KAAK;QAGd,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;IACjC,CAAC;CACF;AAED,MAAM,iBAAiB,GAAmD;IACxE,yBAAyB,EACvB,yHAAyH;IAC3H,qBAAqB,EACnB,mHAAmH;IACrH,uBAAuB,EACrB,4IAA4I;IAC9I,uBAAuB,EACrB,qGAAqG;IACvG,qBAAqB,EACnB,mGAAmG;IACrG,qBAAqB,EACnB,mHAAmH;IACrH,kBAAkB,EAChB,+FAA+F;IACjG,yBAAyB,EACvB,yJAAyJ;IAC3J,gBAAgB,EACd,wGAAwG;IAC1G,qBAAqB,EACnB,oGAAoG;IACtG,qBAAqB,EACnB,iHAAiH;IACnH,cAAc,EACZ,yGAAyG;CAC5G,CAAA;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAsB,EACtB,KAA6B,EAC7B,KAAc;IAEd,MAAM,MAAM,GACV,KAAK,YAAY,iBAAiB;QAChC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;QACtD,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;QAChC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;QAC5D,UAAU,EAAE,KAAK,CAAC,IAAI;QACtB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,cAAc,EAAE,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC;QACpD,iBAAiB,EAAE,IAAI;QACvB,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC7C,CAAA;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAc;IAEd,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtE,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACtD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAyB,CAAA;IACnD,IAAI,CAAC,CAAC,UAAU,IAAI,iBAAiB,CAAC;QAAE,OAAO,SAAS,CAAA;IACxD,OAAO;QACL,UAAU;QACV,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACb,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;iBACL,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;iBAC1B,MAAM,CAAC,OAAO,CAAC;YACpB,CAAC,CAAC,EAAE;KACP,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAsC,IAAI,GAAG,CAAC;IACpF,2BAA2B;IAC3B,yBAAyB;IACzB,uBAAuB;CACxB,CAAC,CAAA"}

package/dist/policy.d.ts

@@ -0,0 +1,13 @@
+export interface CatalogPolicy {
+    readonly allowedRepositoryProtocols: readonly string[];
+    readonly allowedRepositoryHosts: readonly string[];
+    readonly maxFilesPerPlugin: number;
+    readonly maxBytesPerPlugin: number;
+    readonly maxFileBytes: number;
+    readonly maxMarketplacePlugins: number;
+    readonly denyExecutableLifecycleScripts: boolean;
+    readonly publishRequiresCompleteContent: boolean;
+    readonly sensitiveCapabilityTypes: readonly string[];
+}
+export declare const DEFAULT_POLICY: CatalogPolicy;
+export declare function assertRepositoryAllowed(repositoryUrl: string, policy: CatalogPolicy): void;

package/dist/policy.js

@@ -0,0 +1,26 @@
+import { PACKAGE_LIMITS } from './agent-plugins-schema.js';
+import { canonicalRepositoryUrl } from './sources.js';
+export const DEFAULT_POLICY = {
+    allowedRepositoryProtocols: ['https:'],
+    allowedRepositoryHosts: ['github.com', 'www.github.com'],
+    ...PACKAGE_LIMITS,
+    maxMarketplacePlugins: 4096,
+    denyExecutableLifecycleScripts: true,
+    publishRequiresCompleteContent: false,
+    sensitiveCapabilityTypes: [
+        'mcp-server',
+        'connector',
+        'hook',
+        'browser',
+        'scheduled-task',
+        'executable',
+    ],
+};
+export function assertRepositoryAllowed(repositoryUrl, policy) {
+    const parsed = new URL(canonicalRepositoryUrl(repositoryUrl));
+    if (!policy.allowedRepositoryProtocols.includes(parsed.protocol))
+        throw new Error(`GIT_PROTOCOL_POLICY: ${parsed.protocol}`);
+    if (!policy.allowedRepositoryHosts.includes(parsed.hostname.toLowerCase()))
+        throw new Error(`GIT_HOST_POLICY: ${parsed.hostname}`);
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAcrD,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,0BAA0B,EAAE,CAAC,QAAQ,CAAC;IACtC,sBAAsB,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;IACxD,GAAG,cAAc;IACjB,qBAAqB,EAAE,IAAI;IAC3B,8BAA8B,EAAE,IAAI;IACpC,8BAA8B,EAAE,KAAK;IACrC,wBAAwB,EAAE;QACxB,YAAY;QACZ,WAAW;QACX,MAAM;QACN,SAAS;QACT,gBAAgB;QAChB,YAAY;KACb;CACF,CAAA;AAED,MAAM,UAAU,uBAAuB,CAAC,aAAqB,EAAE,MAAqB;IAClF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAA;IAC7D,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC5D,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;AAC1D,CAAC"}

package/dist/portable-catalog.d.ts

@@ -1,9 +1,9 @@
-import { type Catalog } from './schema.js';
-import { type SyncInput, type SyncResult } from './index.js';
-export declare const PACKAGE_METADATA_KEY = "agentPlugins";
+import { PACKAGE_METADATA_KEY } from './agent-plugins-schema.js';
+import { verifyPortableCatalog } from './portable-verify.js';
+import { type SyncInput, type SyncResult } from './synchronize.js';
+export { PACKAGE_METADATA_KEY, verifyPortableCatalog };
 /** Default compiler path: immutable upstream catalog + canonical portable package recipes.
  * The existing v1 catalog envelope remains stable; the extension is versioned inside
  * releaseMetadata, which v1 deliberately defines as extensible JSON.
  */
 export declare function synchronizePortable(options: SyncInput): Promise<SyncResult>;
-export declare function verifyPortableCatalog(catalog: Catalog, requirePortable?: boolean): void;

package/dist/portable-catalog.js

@@ -1,8 +1,10 @@
-import { CatalogSchema, HarnessSchema } from './schema.js';
-import { orderLeadingPlugins, synchronize, createArtifacts, verifyArtifacts, digest, } from './index.js';
-import { compileAgentPackage, verifyAgentPackage, NORMALIZER_VERSION, } from './agent-plugins-catalog.js';
-import { CATALOG_CONTRACT_VERSION } from './index.js';
-export const PACKAGE_METADATA_KEY = 'agentPlugins';
+import { compileAgentPackage, verifyAgentPackage } from './agent-plugins-catalog.js';
+import { NORMALIZER_VERSION, PACKAGE_METADATA_KEY } from './agent-plugins-schema.js';
+import { CATALOG_CONTRACT_VERSION } from './plugin-release.js';
+import { HarnessSchema } from './schema.js';
+import { verifyPortableCatalog } from './portable-verify.js';
+import { synchronize } from './synchronize.js';
+export { PACKAGE_METADATA_KEY, verifyPortableCatalog };
 function currentContract(catalog) {
     return (!!catalog &&
         catalog.plugins.every((plugin) => plugin.availableReleases.every((release) => {
@@ -73,6 +75,10 @@ export async function synchronizePortable(options) {
         ...options,
         metadataOnly: options.metadataOnly === true || options.dryRun === true,
         transformRelease,
+        releaseCompatibility: (release) => {
+            const pkg = release.releaseMetadata[PACKAGE_METADATA_KEY];
+            return pkg ? compatibility(verifyAgentPackage(pkg)) : undefined;
+        },
     };
     let result = await synchronize(input);
     if (!result.changed &&
@@ -83,126 +89,8 @@ export async function synchronizePortable(options) {
         // need not change for a format migration, and dry runs still never publish.
         result = await synchronize({ ...input, fromLock: input.existingLock });
     }
-    if (!result.catalog || !result.lock || input.metadataOnly)
-        return result;
-    const plugins = [];
-    for (const plugin of result.catalog.plugins) {
-        const releases = plugin.availableReleases;
-        const selected = releases.find((release) => release.releaseId === plugin.currentReleaseId);
-        const pkg = selected?.releaseMetadata[PACKAGE_METADATA_KEY];
-        plugins.push({
-            ...plugin,
-            availableReleases: releases,
-            ...(pkg ? { harnessCompatibility: compatibility(verifyAgentPackage(pkg)) } : {}),
-        });
-    }
-    const { catalogId: _oldId, ...old } = CatalogSchema.parse(result.catalog);
-    // Ordering is applied before the catalog ID is computed so the emitted
-    // identifier digests the final plugin order: each category's leading
-    // products head the list.
-    const ordered = orderLeadingPlugins({ ...old, plugins }, options.leading);
-    const catalog = CatalogSchema.parse({
-        ...ordered,
-        catalogId: `catalog:${digest(ordered).slice(7)}`,
-    });
-    verifyPortableCatalog(catalog);
-    const artifacts = createArtifacts(catalog, result.lock, {
-        ...(options.leading ? { leading: options.leading } : {}),
-        ...(options.topCount !== undefined ? { topCount: options.topCount } : {}),
-        ...(options.productPreference ? { productPreference: options.productPreference } : {}),
-        // Without this the shipped artifacts cannot advertise where they are
-        // published, so brand marks and the browsing index lose their URLs. This
-        // path replaces the artifacts the legacy compiler already produced, which is
-        // why it must repeat every option it needs.
-        ...(options.publicationRepositoryUrl
-            ? { publicationRepositoryUrl: options.publicationRepositoryUrl }
-            : {}),
-        ...(options.publicationAssetsBaseUrl
-            ? { publicationAssetsBaseUrl: options.publicationAssetsBaseUrl }
-            : {}),
-        ...(options.publicationCatalogsBaseUrl
-            ? { publicationCatalogsBaseUrl: options.publicationCatalogsBaseUrl }
-            : {}),
-        curationDiagnostics: (options.mode ?? 'live') !== 'offline',
-    });
-    verifyArtifacts(artifacts);
-    const changed = catalog.plugins
-        .filter((plugin) => {
-        const prior = input.existingCatalog?.plugins.find((item) => item.pluginId === plugin.pluginId);
-        return prior && digest(prior) !== digest(plugin);
-    })
-        .map((plugin) => plugin.pluginId);
-    return {
-        ...result,
-        catalog,
-        artifacts,
-        changeReport: {
-            ...result.changeReport,
-            changedPlugins: [...new Set([...result.changeReport.changedPlugins, ...changed])].toSorted(),
-        },
-    };
-}
-/**
- * A single-line summary of why a release's package descriptor was refused.
- *
- * The schema's own failure is a structured issue list; the catalog's refusal
- * contract is one typed line. The first issue is kept as the detail, because
- * it names the field that was wrong.
- */
-function describeProvenanceFailure(error) {
-    const issues = error.issues;
-    if (Array.isArray(issues) && issues.length > 0) {
-        const first = issues[0];
-        const path = Array.isArray(first.path) ? first.path.join('.') : '';
-        const message = typeof first.message === 'string' ? first.message : '';
-        return [path, message].filter(Boolean).join(': ').replace(/\s+/g, ' ').slice(0, 200);
-    }
-    return error instanceof Error
-        ? error.message.replace(/\s+/g, ' ').slice(0, 200)
-        : 'the descriptor is not a package recipe';
-}
-export function verifyPortableCatalog(catalog, requirePortable = false) {
-    const { catalogId, ...body } = CatalogSchema.parse(catalog);
-    if (catalogId !== `catalog:${digest(body).slice(7)}`)
-        throw new Error('CATALOG_ID_MISMATCH');
-    const ids = new Set();
-    for (const plugin of catalog.plugins) {
-        if (ids.has(plugin.pluginId))
-            throw new Error('DUPLICATE_PLUGIN_ID');
-        ids.add(plugin.pluginId);
-        const releases = new Set(plugin.availableReleases.map((release) => release.releaseId));
-        if (releases.size !== plugin.availableReleases.length || !releases.has(plugin.currentReleaseId))
-            throw new Error('RELEASE_SELECTION_INVALID');
-    }
-    for (const plugin of catalog.plugins)
-        for (const release of plugin.availableReleases) {
-            if (requirePortable && release.contentResolution !== 'complete')
-                throw new Error('COMPLETE_SOURCE_REQUIRED');
-            const descriptor = release.releaseMetadata[PACKAGE_METADATA_KEY];
-            if (descriptor === undefined) {
-                if (requirePortable && release.contentResolution === 'complete')
-                    throw new Error(`PORTABLE_RESYNC_REQUIRED: ${plugin.pluginId}`);
-                continue;
-            }
-            let pkg;
-            try {
-                pkg = verifyAgentPackage(descriptor);
-            }
-            catch (error) {
-                // A consumer imports a catalog it did not compile, so a malformed
-                // provenance descriptor is an IMPORT failure, and it must be refused
-                // the way every other failure here is refused: one typed, single-line
-                // reason that names the plugin. The schema's own multi-line issue
-                // dump is not a refusal a consumer can match on.
-                throw new Error(`PACKAGE_PROVENANCE_INVALID: ${plugin.pluginId} (${describeProvenanceFailure(error)})`, { cause: error });
-            }
-            if (release.contentResolution !== 'complete' ||
-                pkg.sourceDigest !== release.canonicalContentDigest)
-                throw new Error(`PACKAGE_PROVENANCE_MISMATCH: ${plugin.pluginId}`);
-            const sourcePaths = new Set(release.fileIndex);
-            for (const file of pkg.files)
-                if (file.action === 'copy' && !sourcePaths.has(file.sourcePath))
-                    throw new Error(`PACKAGE_SOURCE_FILE_MISSING: ${plugin.pluginId}`);
-        }
+    if (result.catalog && !input.metadataOnly)
+        verifyPortableCatalog(result.catalog);
+    return result;
 }
 //# sourceMappingURL=portable-catalog.js.map