@agentproto/cli 0.1.0-alpha.8 → 0.1.0

package/dist/registry/plugins.mjs

@@ -0,0 +1,201 @@
+import { readFile } from 'fs/promises';
+import { homedir } from 'os';
+import { join, dirname } from 'path';
+import { createRequire } from 'module';
+import { pathToFileURL } from 'url';
+import { z } from 'zod';
+
+/**
+ * @agentproto/cli v0.1.0-alpha
+ * The `agentproto` binary — install / run / serve AIP-45 agent CLIs.
+ */
+
+var PLUGIN_MANIFEST_SCHEMA = "agentproto/plugin/v1";
+var AdapterEntrySchema = z.object({
+  /** The `kind` string the manifest's substrate/dispatcher/etc. block uses. */
+  kind: z.string().min(1),
+  /**
+   * Path to the entry module, relative to the plugin package root.
+   * Resolved via the plugin's `package.json#main`/`exports` (i.e. you
+   * can use a subpath like `./dist/substrates.mjs` or an export name
+   * like `.` if the plugin re-exports everything from its root).
+   */
+  entry: z.string().min(1),
+  /** Named export inside `entry` — the factory function. */
+  export: z.string().min(1),
+  /** Free-form description; shown by `agentproto plugins show`. */
+  description: z.string().optional()
+}).loose();
+var SubstrateEntrySchema = AdapterEntrySchema.extend({
+  /**
+   * Free-form capability tags. Not gated by the kernel yet, but
+   * surfaced by `agentproto plugins show` so users can see what the
+   * substrate claims to support (mentions, reactions, visibility, …).
+   */
+  capabilities: z.array(z.string()).optional()
+});
+var PluginManifestSchema = z.object({
+  schema: z.literal(PLUGIN_MANIFEST_SCHEMA),
+  substrates: z.array(SubstrateEntrySchema).default([]),
+  dispatchers: z.array(AdapterEntrySchema).default([]),
+  executors: z.array(AdapterEntrySchema).default([]),
+  stateStores: z.array(AdapterEntrySchema).default([])
+}).loose();
+
+// src/registry/runtime.ts
+var substrates = /* @__PURE__ */ new Map();
+var dispatchers = /* @__PURE__ */ new Map();
+var executors = /* @__PURE__ */ new Map();
+var stateStores = /* @__PURE__ */ new Map();
+function registerSubstrate(kind, factory) {
+  substrates.set(kind, factory);
+}
+function registerDispatcher(kind, factory) {
+  dispatchers.set(kind, factory);
+}
+function registerExecutor(kind, factory) {
+  executors.set(kind, factory);
+}
+function registerStateStore(kind, factory) {
+  stateStores.set(kind, factory);
+}
+
+// src/registry/manifest-loader.ts
+async function loadPluginFromManifest(pluginId) {
+  const result = await readPluginManifest(pluginId);
+  if (!result) return null;
+  const { manifest, packageRoot } = result;
+  for (const sub of manifest.substrates) {
+    const factory = await importFactory(
+      packageRoot,
+      pluginId,
+      sub.entry,
+      sub.export
+    );
+    registerSubstrate(sub.kind, factory);
+  }
+  for (const dis of manifest.dispatchers) {
+    const factory = await importFactory(
+      packageRoot,
+      pluginId,
+      dis.entry,
+      dis.export
+    );
+    registerDispatcher(dis.kind, factory);
+  }
+  for (const exe of manifest.executors) {
+    const factory = await importFactory(
+      packageRoot,
+      pluginId,
+      exe.entry,
+      exe.export
+    );
+    registerExecutor(exe.kind, factory);
+  }
+  for (const st of manifest.stateStores) {
+    const factory = await importFactory(
+      packageRoot,
+      pluginId,
+      st.entry,
+      st.export
+    );
+    registerStateStore(st.kind, factory);
+  }
+  return manifest;
+}
+async function readPluginManifest(pluginId) {
+  const packageJsonPath = resolvePluginPackageJson(pluginId);
+  if (!packageJsonPath) return null;
+  const packageRoot = dirname(packageJsonPath);
+  const standalonePath = join(packageRoot, "agentproto.json");
+  const standalone = await readJsonIfExists(standalonePath);
+  if (standalone !== void 0) {
+    return {
+      manifest: PluginManifestSchema.parse(standalone),
+      packageRoot
+    };
+  }
+  const pkgJson = await readJsonIfExists(packageJsonPath);
+  if (pkgJson && typeof pkgJson === "object" && pkgJson.agentproto) {
+    return {
+      manifest: PluginManifestSchema.parse(pkgJson.agentproto),
+      packageRoot
+    };
+  }
+  return null;
+}
+async function importFactory(packageRoot, pluginId, entry, exportName) {
+  const abs = entry.startsWith(".") ? join(packageRoot, entry) : entry;
+  const url = entry.startsWith(".") ? pathToFileURL(abs).href : entry;
+  const mod = await import(url);
+  const exported = mod[exportName];
+  if (typeof exported !== "function") {
+    throw new Error(
+      `agentproto plugin '${pluginId}': manifest entry '${entry}' has no callable export '${exportName}' (got ${typeof exported}).`
+    );
+  }
+  return exported;
+}
+function resolvePluginPackageJson(pluginId) {
+  const candidates = [
+    import.meta.url,
+    pathToFileURL(join(process.cwd(), "package.json")).href
+  ];
+  for (const root of candidates) {
+    try {
+      return createRequire(root).resolve(`${pluginId}/package.json`);
+    } catch {
+    }
+  }
+  return null;
+}
+async function readJsonIfExists(path) {
+  try {
+    const raw = await readFile(path, "utf8");
+    return JSON.parse(raw);
+  } catch (err) {
+    if (err.code === "ENOENT") return void 0;
+    throw err;
+  }
+}
+
+// src/registry/plugins.ts
+async function loadPluginsFromConfig() {
+  const path = configPath();
+  try {
+    const raw = await readFile(path, "utf8");
+    const parsed = JSON.parse(raw);
+    return parsed.plugins ?? [];
+  } catch (err) {
+    if (err.code === "ENOENT") return [];
+    process.stderr.write(
+      `agentproto: failed to read ${path} \u2014 ${err instanceof Error ? err.message : String(err)}
+`
+    );
+    return [];
+  }
+}
+async function loadPlugins(moduleIds) {
+  for (const id of moduleIds) {
+    try {
+      const manifest = await loadPluginFromManifest(id);
+      if (manifest === null) {
+        await import(id);
+      }
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      process.stderr.write(
+        `agentproto: plugin '${id}' failed to load \u2014 ${msg}
+`
+      );
+    }
+  }
+}
+function configPath() {
+  const base = process.env["AGENTPROTO_HOME"] ?? join(homedir(), ".agentproto");
+  return join(base, "config.json");
+}
+
+export { loadPlugins, loadPluginsFromConfig };
+//# sourceMappingURL=plugins.mjs.map
+//# sourceMappingURL=plugins.mjs.map

package/dist/registry/plugins.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/registry/manifest.ts","../../src/registry/runtime.ts","../../src/registry/manifest-loader.ts","../../src/registry/plugins.ts"],"names":["readFile","join"],"mappings":";;;;;;;;;;;;AAyCO,IAAM,sBAAA,GAAyB,sBAAA;AAEtC,IAAM,kBAAA,GAAqB,EACxB,MAAA,CAAO;AAAA;AAAA,EAEN,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOtB,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAEvB,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAExB,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAC1B,CAAC,EACA,KAAA,EAAM;AAET,IAAM,oBAAA,GAAuB,mBAAmB,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMrD,cAAc,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA;AACpC,CAAC,CAAA;AAEM,IAAM,oBAAA,GAAuB,EACjC,MAAA,CAAO;AAAA,EACN,MAAA,EAAQ,CAAA,CAAE,OAAA,CAAQ,sBAAsB,CAAA;AAAA,EACxC,YAAY,CAAA,CAAE,KAAA,CAAM,oBAAoB,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,EACpD,aAAa,CAAA,CAAE,KAAA,CAAM,kBAAkB,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,EACnD,WAAW,CAAA,CAAE,KAAA,CAAM,kBAAkB,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,EACjD,aAAa,CAAA,CAAE,KAAA,CAAM,kBAAkB,CAAA,CAAE,OAAA,CAAQ,EAAE;AACrD,CAAC,EACA,KAAA,EAAM;;;ACCT,IAAM,UAAA,uBAAiB,GAAA,EAA8B;AACrD,IAAM,WAAA,uBAAkB,GAAA,EAA+B;AACvD,IAAM,SAAA,uBAAgB,GAAA,EAA6B;AACnD,IAAM,WAAA,uBAAkB,GAAA,EAA+B;AAIhD,SAAS,iBAAA,CAAkB,MAAc,OAAA,EAAiC;AAC/E,EAAA,UAAA,CAAW,GAAA,CAAI,MAAM,OAAO,CAAA;AAC9B;AAEO,SAAS,kBAAA,CACd,MACA,OAAA,EACM;AACN,EAAA,WAAA,CAAY,GAAA,CAAI,MAAM,OAAO,CAAA;AAC/B;AAEO,SAAS,gBAAA,CAAiB,MAAc,OAAA,EAAgC;AAC7E,EAAA,SAAA,CAAU,GAAA,CAAI,MAAM,OAAO,CAAA;AAC7B;AAEO,SAAS,kBAAA,CACd,MACA,OAAA,EACM;AACN,EAAA,WAAA,CAAY,GAAA,CAAI,MAAM,OAAO,CAAA;AAC/B;;;AC/DA,eAAsB,uBACpB,QAAA,EACgC;AAChC,EAAA,MAAM,MAAA,GAAS,MAAM,kBAAA,CAAmB,QAAQ,CAAA;AAChD,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,MAAM,EAAE,QAAA,EAAU,WAAA,EAAY,GAAI,MAAA;AAElC,EAAA,KAAA,MAAW,GAAA,IAAO,SAAS,UAAA,EAAY;AACrC,IAAA,MAAM,UAAU,MAAM,aAAA;AAAA,MACpB,WAAA;AAAA,MACA,QAAA;AAAA,MACA,GAAA,CAAI,KAAA;AAAA,MACJ,GAAA,CAAI;AAAA,KACN;AACA,IAAA,iBAAA,CAAkB,GAAA,CAAI,MAAM,OAAO,CAAA;AAAA,EACrC;AACA,EAAA,KAAA,MAAW,GAAA,IAAO,SAAS,WAAA,EAAa;AACtC,IAAA,MAAM,UAAU,MAAM,aAAA;AAAA,MACpB,WAAA;AAAA,MACA,QAAA;AAAA,MACA,GAAA,CAAI,KAAA;AAAA,MACJ,GAAA,CAAI;AAAA,KACN;AACA,IAAA,kBAAA,CAAmB,GAAA,CAAI,MAAM,OAAO,CAAA;AAAA,EACtC;AACA,EAAA,KAAA,MAAW,GAAA,IAAO,SAAS,SAAA,EAAW;AACpC,IAAA,MAAM,UAAU,MAAM,aAAA;AAAA,MACpB,WAAA;AAAA,MACA,QAAA;AAAA,MACA,GAAA,CAAI,KAAA;AAAA,MACJ,GAAA,CAAI;AAAA,KACN;AACA,IAAA,gBAAA,CAAiB,GAAA,CAAI,MAAM,OAAO,CAAA;AAAA,EACpC;AACA,EAAA,KAAA,MAAW,EAAA,IAAM,SAAS,WAAA,EAAa;AACrC,IAAA,MAAM,UAAU,MAAM,aAAA;AAAA,MACpB,WAAA;AAAA,MACA,QAAA;AAAA,MACA,EAAA,CAAG,KAAA;AAAA,MACH,EAAA,CAAG;AAAA,KACL;AACA,IAAA,kBAAA,CAAmB,EAAA,CAAG,MAAM,OAAO,CAAA;AAAA,EACrC;AAEA,EAAA,OAAO,QAAA;AACT;AAMA,eAAsB,mBACpB,QAAA,EACmE;AACnE,EAAA,MAAM,eAAA,GAAkB,yBAAyB,QAAQ,CAAA;AACzD,EAAA,IAAI,CAAC,iBAAiB,OAAO,IAAA;AAE7B,EAAA,MAAM,WAAA,GAAc,QAAQ,eAAe,CAAA;AAG3C,EAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,WAAA,EAAa,iBAAiB,CAAA;AAC1D,EAAA,MAAM,UAAA,GAAa,MAAM,gBAAA,CAAiB,cAAc,CAAA;AACxD,EAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,oBAAA,CAAqB,KAAA,CAAM,UAAU,CAAA;AAAA,MAC/C;AAAA,KACF;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,GAAW,MAAM,gBAAA,CAAiB,eAAe,CAAA;AAGvD,EAAA,IAAI,OAAA,IAAW,OAAO,OAAA,KAAY,QAAA,IAAY,QAAQ,UAAA,EAAY;AAChE,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,oBAAA,CAAqB,KAAA,CAAM,OAAA,CAAQ,UAAU,CAAA;AAAA,MACvD;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO,IAAA;AACT;AAEA,eAAe,aAAA,CACb,WAAA,EACA,QAAA,EACA,KAAA,EACA,UAAA,EACmB;AAKnB,EAAA,MAAM,GAAA,GAAM,MAAM,UAAA,CAAW,GAAG,IAAI,IAAA,CAAK,WAAA,EAAa,KAAK,CAAA,GAAI,KAAA;AAC/D,EAAA,MAAM,GAAA,GAAM,MAAM,UAAA,CAAW,GAAG,IAAI,aAAA,CAAc,GAAG,EAAE,IAAA,GAAO,KAAA;AAC9D,EAAA,MAAM,GAAA,GAAO,MAAM,OAAO,GAAA,CAAA;AAC1B,EAAA,MAAM,QAAA,GAAW,IAAI,UAAU,CAAA;AAC/B,EAAA,IAAI,OAAO,aAAa,UAAA,EAAY;AAClC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,mBAAA,EAAsB,QAAQ,CAAA,mBAAA,EAAsB,KAAK,6BAA6B,UAAU,CAAA,OAAA,EAAU,OAAO,QAAQ,CAAA,EAAA;AAAA,KAC3H;AAAA,EACF;AACA,EAAA,OAAO,QAAA;AACT;AAEA,SAAS,yBAAyB,QAAA,EAAiC;AAIjE,EAAA,MAAM,UAAA,GAAa;AAAA,IACjB,MAAA,CAAA,IAAA,CAAY,GAAA;AAAA,IACZ,cAAc,IAAA,CAAK,OAAA,CAAQ,KAAI,EAAG,cAAc,CAAC,CAAA,CAAE;AAAA,GACrD;AACA,EAAA,KAAA,MAAW,QAAQ,UAAA,EAAY;AAC7B,IAAA,IAAI;AACF,MAAA,OAAO,cAAc,IAAI,CAAA,CAAE,OAAA,CAAQ,CAAA,EAAG,QAAQ,CAAA,aAAA,CAAe,CAAA;AAAA,IAC/D,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAEA,eAAe,iBAAiB,IAAA,EAAgC;AAC9D,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AACvC,IAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,EACvB,SAAS,GAAA,EAAK;AACZ,IAAA,IAAK,GAAA,CAA8B,IAAA,KAAS,QAAA,EAAU,OAAO,MAAA;AAC7D,IAAA,MAAM,GAAA;AAAA,EACR;AACF;;;ACjJA,eAAsB,qBAAA,GAAoD;AACxE,EAAA,MAAM,OAAO,UAAA,EAAW;AACxB,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAMA,QAAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AACvC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC7B,IAAA,OAAO,MAAA,CAAO,WAAW,EAAC;AAAA,EAC5B,SAAS,GAAA,EAAK;AACZ,IAAA,IAAK,GAAA,CAA8B,IAAA,KAAS,QAAA,EAAU,OAAO,EAAC;AAC9D,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,MACb,CAAA,2BAAA,EAA8B,IAAI,CAAA,QAAA,EAAM,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC;AAAA;AAAA,KAC1F;AACA,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAEA,eAAsB,YAAY,SAAA,EAA6C;AAC7E,EAAA,KAAA,MAAW,MAAM,SAAA,EAAW;AAC1B,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,sBAAA,CAAuB,EAAE,CAAA;AAChD,MAAA,IAAI,aAAa,IAAA,EAAM;AAErB,QAAA,MAAM,OAAO,EAAA,CAAA;AAAA,MACf;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC3D,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,QACb,CAAA,oBAAA,EAAuB,EAAE,CAAA,wBAAA,EAAsB,GAAG;AAAA;AAAA,OACpD;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,UAAA,GAAqB;AAC5B,EAAA,MAAM,IAAA,GAAO,QAAQ,GAAA,CAAI,iBAAiB,KAAKC,IAAAA,CAAK,OAAA,IAAW,aAAa,CAAA;AAC5E,EAAA,OAAOA,IAAAA,CAAK,MAAM,aAAa,CAAA;AACjC","file":"plugins.mjs","sourcesContent":["/**\n * Plugin manifest — `agentproto/plugin/v1`.\n *\n * Plugins declare what they provide in either:\n *   - their `package.json` under the `agentproto` key, OR\n *   - a standalone `agentproto.json` next to their `package.json`.\n *\n * The CLI reads this manifest, dynamic-imports each adapter entry,\n * and registers it with the runtime registry. Plugins don't need\n * side-effect imports any more — they just export their factory\n * functions and let the manifest do the wiring.\n *\n * Example (in @guilde/agentproto-bridge's package.json):\n *\n *   {\n *     \"name\": \"@guilde/agentproto-bridge\",\n *     \"agentproto\": {\n *       \"schema\": \"agentproto/plugin/v1\",\n *       \"substrates\": [\n *         {\n *           \"kind\": \"guilde-mcp\",\n *           \"entry\": \"./dist/index.mjs\",\n *           \"export\": \"guildeMcpSubstrateFactory\",\n *           \"capabilities\": [\"mentions\", \"reactions\", \"identity\"],\n *           \"description\": \"Reads/writes turns through Guilde's MCP server.\"\n *         }\n *       ],\n *       \"executors\": [\n *         {\n *           \"kind\": \"db-operator\",\n *           \"entry\": \"./dist/index.mjs\",\n *           \"export\": \"dbOperatorExecutorFactory\",\n *           \"description\": \"Delegates to Mastra operators via run_operator.\"\n *         }\n *       ]\n *     }\n *   }\n */\n\nimport { z } from \"zod\"\n\nexport const PLUGIN_MANIFEST_SCHEMA = \"agentproto/plugin/v1\" as const\n\nconst AdapterEntrySchema = z\n  .object({\n    /** The `kind` string the manifest's substrate/dispatcher/etc. block uses. */\n    kind: z.string().min(1),\n    /**\n     * Path to the entry module, relative to the plugin package root.\n     * Resolved via the plugin's `package.json#main`/`exports` (i.e. you\n     * can use a subpath like `./dist/substrates.mjs` or an export name\n     * like `.` if the plugin re-exports everything from its root).\n     */\n    entry: z.string().min(1),\n    /** Named export inside `entry` — the factory function. */\n    export: z.string().min(1),\n    /** Free-form description; shown by `agentproto plugins show`. */\n    description: z.string().optional(),\n  })\n  .loose()\n\nconst SubstrateEntrySchema = AdapterEntrySchema.extend({\n  /**\n   * Free-form capability tags. Not gated by the kernel yet, but\n   * surfaced by `agentproto plugins show` so users can see what the\n   * substrate claims to support (mentions, reactions, visibility, …).\n   */\n  capabilities: z.array(z.string()).optional(),\n})\n\nexport const PluginManifestSchema = z\n  .object({\n    schema: z.literal(PLUGIN_MANIFEST_SCHEMA),\n    substrates: z.array(SubstrateEntrySchema).default([]),\n    dispatchers: z.array(AdapterEntrySchema).default([]),\n    executors: z.array(AdapterEntrySchema).default([]),\n    stateStores: z.array(AdapterEntrySchema).default([]),\n  })\n  .loose()\n\nexport type PluginManifest = z.infer<typeof PluginManifestSchema>\nexport type AdapterEntry = z.infer<typeof AdapterEntrySchema>\nexport type SubstrateEntry = z.infer<typeof SubstrateEntrySchema>\n","/**\n * MultiAgentRuntime adapter registry — the seam third-party packages\n * use to plug substrates, dispatchers, participant executors, and\n * state stores into `agentproto run-swarm` without forking the CLI.\n *\n * A plugin module exports nothing required by name — it just imports\n * `register*` helpers from `@agentproto/cli/registry/runtime` and\n * calls them at module load. The CLI discovers plugins via:\n *\n *   1. `--plugin <module-id>` flags on `run-swarm`\n *   2. The `plugins[]` array in `~/.agentproto/config.json`\n *   3. Auto-registered built-ins (file substrate, mention dispatcher,\n *      fs state, agent-cli participant) — registered by\n *      `registerBuiltins()` at startup.\n *\n * Manifest `kind` strings are resolved through the registry: the kind\n * is the lookup key; the factory builds the concrete adapter from the\n * (loose) manifest config + shared context.\n */\n\nimport type {\n  Dispatcher,\n  ParticipantExecutor,\n  StateStore,\n  Substrate,\n} from \"@agentproto/agent-runtime\"\n\n// ── Context passed to every factory ──\n\n/**\n * Shared context every factory receives. Carries the manifest's base\n * directory (for resolving relative paths declared in adapter configs)\n * and a `cleanup` collector so adapters that hold disposable resources\n * (MCP clients, sockets, child processes) can register teardown callbacks\n * that the CLI runs on shutdown.\n */\nexport interface AdapterContext {\n  /** Absolute directory of the manifest file. */\n  readonly baseDir: string\n  /** Register a teardown callback to run when the swarm shuts down. */\n  registerCleanup(fn: () => Promise<void> | void): void\n}\n\n// ── Loose config shape ──\n\n/**\n * Manifest adapter blocks are loose: `{ kind: string, ...host-extension }`.\n * Each factory pulls its own typed fields off the config and validates\n * them inline.\n */\nexport interface AdapterConfig {\n  readonly kind: string\n  readonly [extension: string]: unknown\n}\n\n// ── Factory signatures ──\n\nexport type SubstrateFactory = (\n  config: AdapterConfig,\n  ctx: AdapterContext\n) => Promise<Substrate> | Substrate\n\nexport type DispatcherFactory = (\n  config: AdapterConfig,\n  ctx: AdapterContext\n) => Promise<Dispatcher> | Dispatcher\n\nexport type ExecutorFactory = (\n  config: AdapterConfig,\n  ctx: AdapterContext\n) => Promise<ParticipantExecutor> | ParticipantExecutor\n\nexport type StateStoreFactory = (\n  config: AdapterConfig,\n  ctx: AdapterContext\n) => Promise<StateStore> | StateStore\n\n// ── Registry state ──\n\nconst substrates = new Map<string, SubstrateFactory>()\nconst dispatchers = new Map<string, DispatcherFactory>()\nconst executors = new Map<string, ExecutorFactory>()\nconst stateStores = new Map<string, StateStoreFactory>()\n\n// ── Public registration API ──\n\nexport function registerSubstrate(kind: string, factory: SubstrateFactory): void {\n  substrates.set(kind, factory)\n}\n\nexport function registerDispatcher(\n  kind: string,\n  factory: DispatcherFactory\n): void {\n  dispatchers.set(kind, factory)\n}\n\nexport function registerExecutor(kind: string, factory: ExecutorFactory): void {\n  executors.set(kind, factory)\n}\n\nexport function registerStateStore(\n  kind: string,\n  factory: StateStoreFactory\n): void {\n  stateStores.set(kind, factory)\n}\n\n// ── Lookup API (used by run-swarm wiring) ──\n\nexport function getSubstrateFactory(kind: string): SubstrateFactory | undefined {\n  return substrates.get(kind)\n}\n\nexport function getDispatcherFactory(\n  kind: string\n): DispatcherFactory | undefined {\n  return dispatchers.get(kind)\n}\n\nexport function getExecutorFactory(kind: string): ExecutorFactory | undefined {\n  return executors.get(kind)\n}\n\nexport function getStateStoreFactory(\n  kind: string\n): StateStoreFactory | undefined {\n  return stateStores.get(kind)\n}\n\nexport function listRegisteredKinds(): {\n  substrates: readonly string[]\n  dispatchers: readonly string[]\n  executors: readonly string[]\n  stateStores: readonly string[]\n} {\n  return {\n    substrates: [...substrates.keys()],\n    dispatchers: [...dispatchers.keys()],\n    executors: [...executors.keys()],\n    stateStores: [...stateStores.keys()],\n  }\n}\n\n/**\n * Test-only: drop every registration. Plugin registrations persist for\n * the lifetime of the process, so tests that load + unload plugins use\n * this to start from a clean slate.\n */\nexport function _resetRegistryForTests(): void {\n  substrates.clear()\n  dispatchers.clear()\n  executors.clear()\n  stateStores.clear()\n}\n","/**\n * Manifest-based plugin wiring.\n *\n * Given a plugin package id, locate its plugin manifest, validate it,\n * and register every declared adapter (substrate, dispatcher,\n * executor, state store) with the runtime registry. The plugin\n * doesn't need to call register* itself — the manifest declares what\n * it provides, this loader handles the wiring.\n *\n * Discovery order, per plugin:\n *   1. `<package-root>/agentproto.json`\n *   2. `<package-root>/package.json` → `.agentproto` block\n *\n * Returns the manifest (so callers like `agentproto plugins show` can\n * print it) or `null` if neither location declares one. A `null`\n * return is not an error — the caller may fall back to side-effect\n * imports for legacy plugins.\n */\n\nimport { readFile } from \"node:fs/promises\"\nimport { dirname, join } from \"node:path\"\nimport { createRequire } from \"node:module\"\nimport { pathToFileURL } from \"node:url\"\nimport {\n  PluginManifestSchema,\n  type PluginManifest,\n} from \"./manifest.js\"\nimport {\n  registerDispatcher,\n  registerExecutor,\n  registerStateStore,\n  registerSubstrate,\n  type DispatcherFactory,\n  type ExecutorFactory,\n  type StateStoreFactory,\n  type SubstrateFactory,\n} from \"./runtime.js\"\n\n/**\n * Load and register every adapter declared in a plugin's manifest.\n * Returns the manifest on success, `null` if the plugin doesn't ship\n * one (so the caller can fall back to side-effect import).\n */\nexport async function loadPluginFromManifest(\n  pluginId: string\n): Promise<PluginManifest | null> {\n  const result = await readPluginManifest(pluginId)\n  if (!result) return null\n  const { manifest, packageRoot } = result\n\n  for (const sub of manifest.substrates) {\n    const factory = await importFactory<SubstrateFactory>(\n      packageRoot,\n      pluginId,\n      sub.entry,\n      sub.export\n    )\n    registerSubstrate(sub.kind, factory)\n  }\n  for (const dis of manifest.dispatchers) {\n    const factory = await importFactory<DispatcherFactory>(\n      packageRoot,\n      pluginId,\n      dis.entry,\n      dis.export\n    )\n    registerDispatcher(dis.kind, factory)\n  }\n  for (const exe of manifest.executors) {\n    const factory = await importFactory<ExecutorFactory>(\n      packageRoot,\n      pluginId,\n      exe.entry,\n      exe.export\n    )\n    registerExecutor(exe.kind, factory)\n  }\n  for (const st of manifest.stateStores) {\n    const factory = await importFactory<StateStoreFactory>(\n      packageRoot,\n      pluginId,\n      st.entry,\n      st.export\n    )\n    registerStateStore(st.kind, factory)\n  }\n\n  return manifest\n}\n\n/**\n * Read + validate a plugin's manifest without registering anything.\n * Used by `agentproto plugins show` to introspect installed plugins.\n */\nexport async function readPluginManifest(\n  pluginId: string\n): Promise<{ manifest: PluginManifest; packageRoot: string } | null> {\n  const packageJsonPath = resolvePluginPackageJson(pluginId)\n  if (!packageJsonPath) return null\n\n  const packageRoot = dirname(packageJsonPath)\n\n  // 1. Try standalone agentproto.json first.\n  const standalonePath = join(packageRoot, \"agentproto.json\")\n  const standalone = await readJsonIfExists(standalonePath)\n  if (standalone !== undefined) {\n    return {\n      manifest: PluginManifestSchema.parse(standalone),\n      packageRoot,\n    }\n  }\n\n  // 2. Fall back to package.json#agentproto.\n  const pkgJson = (await readJsonIfExists(packageJsonPath)) as\n    | { agentproto?: unknown }\n    | undefined\n  if (pkgJson && typeof pkgJson === \"object\" && pkgJson.agentproto) {\n    return {\n      manifest: PluginManifestSchema.parse(pkgJson.agentproto),\n      packageRoot,\n    }\n  }\n\n  return null\n}\n\nasync function importFactory<TFactory>(\n  packageRoot: string,\n  pluginId: string,\n  entry: string,\n  exportName: string\n): Promise<TFactory> {\n  // Resolve the entry path relative to the package root. We dynamic-\n  // import via file:// URL so an absolute path works without going\n  // through Node's package resolver (which would need the export to\n  // be declared in `exports`).\n  const abs = entry.startsWith(\".\") ? join(packageRoot, entry) : entry\n  const url = entry.startsWith(\".\") ? pathToFileURL(abs).href : entry\n  const mod = (await import(url)) as Record<string, unknown>\n  const exported = mod[exportName]\n  if (typeof exported !== \"function\") {\n    throw new Error(\n      `agentproto plugin '${pluginId}': manifest entry '${entry}' has no callable export '${exportName}' (got ${typeof exported}).`\n    )\n  }\n  return exported as TFactory\n}\n\nfunction resolvePluginPackageJson(pluginId: string): string | null {\n  // Try the cli's own resolution first (global install + monorepo\n  // workspace deps), then the user's cwd (locally-installed plugins).\n  // `require.resolve` needs `createRequire` since we're an ESM bundle.\n  const candidates = [\n    import.meta.url,\n    pathToFileURL(join(process.cwd(), \"package.json\")).href,\n  ]\n  for (const root of candidates) {\n    try {\n      return createRequire(root).resolve(`${pluginId}/package.json`)\n    } catch {\n      // try next root\n    }\n  }\n  return null\n}\n\nasync function readJsonIfExists(path: string): Promise<unknown> {\n  try {\n    const raw = await readFile(path, \"utf8\")\n    return JSON.parse(raw)\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"ENOENT\") return undefined\n    throw err\n  }\n}\n","/**\n * Plugin loader. For each plugin id:\n *\n *   1. Try manifest-based wiring — read the plugin's\n *      `package.json#agentproto` (or standalone `agentproto.json`),\n *      validate the `agentproto/plugin/v1` schema, dynamic-import\n *      each declared adapter entry, register with the runtime\n *      registry.\n *   2. Fall back to side-effect import — older plugins that just\n *      `registerSubstrate(...)` at module load are still supported.\n *\n * Discovery sources for plugin ids:\n *   - `--plugin <module-id>` flag(s) on the verb\n *   - `plugins[]` array in `~/.agentproto/config.json`\n *\n * Failures: a plugin that throws on load is reported on stderr and\n * the load skips it. The CLI continues — a single bad plugin\n * shouldn't take down the swarm.\n */\n\nimport { readFile } from \"node:fs/promises\"\nimport { homedir } from \"node:os\"\nimport { join } from \"node:path\"\nimport { loadPluginFromManifest } from \"./manifest-loader.js\"\n\ninterface AgentprotoConfig {\n  plugins?: readonly string[]\n}\n\nexport async function loadPluginsFromConfig(): Promise<readonly string[]> {\n  const path = configPath()\n  try {\n    const raw = await readFile(path, \"utf8\")\n    const parsed = JSON.parse(raw) as AgentprotoConfig\n    return parsed.plugins ?? []\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"ENOENT\") return []\n    process.stderr.write(\n      `agentproto: failed to read ${path} — ${err instanceof Error ? err.message : String(err)}\\n`\n    )\n    return []\n  }\n}\n\nexport async function loadPlugins(moduleIds: readonly string[]): Promise<void> {\n  for (const id of moduleIds) {\n    try {\n      const manifest = await loadPluginFromManifest(id)\n      if (manifest === null) {\n        // No manifest declared → side-effect import for legacy plugins.\n        await import(id)\n      }\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err)\n      process.stderr.write(\n        `agentproto: plugin '${id}' failed to load — ${msg}\\n`\n      )\n    }\n  }\n}\n\nfunction configPath(): string {\n  const base = process.env[\"AGENTPROTO_HOME\"] ?? join(homedir(), \".agentproto\")\n  return join(base, \"config.json\")\n}\n"]}

package/dist/registry/runtime.d.ts

@@ -0,0 +1,70 @@
+import { Dispatcher, ParticipantExecutor, StateStore, Substrate } from '@agentproto/agent-runtime';
+
+/**
+ * MultiAgentRuntime adapter registry — the seam third-party packages
+ * use to plug substrates, dispatchers, participant executors, and
+ * state stores into `agentproto run-swarm` without forking the CLI.
+ *
+ * A plugin module exports nothing required by name — it just imports
+ * `register*` helpers from `@agentproto/cli/registry/runtime` and
+ * calls them at module load. The CLI discovers plugins via:
+ *
+ *   1. `--plugin <module-id>` flags on `run-swarm`
+ *   2. The `plugins[]` array in `~/.agentproto/config.json`
+ *   3. Auto-registered built-ins (file substrate, mention dispatcher,
+ *      fs state, agent-cli participant) — registered by
+ *      `registerBuiltins()` at startup.
+ *
+ * Manifest `kind` strings are resolved through the registry: the kind
+ * is the lookup key; the factory builds the concrete adapter from the
+ * (loose) manifest config + shared context.
+ */
+
+/**
+ * Shared context every factory receives. Carries the manifest's base
+ * directory (for resolving relative paths declared in adapter configs)
+ * and a `cleanup` collector so adapters that hold disposable resources
+ * (MCP clients, sockets, child processes) can register teardown callbacks
+ * that the CLI runs on shutdown.
+ */
+interface AdapterContext {
+    /** Absolute directory of the manifest file. */
+    readonly baseDir: string;
+    /** Register a teardown callback to run when the swarm shuts down. */
+    registerCleanup(fn: () => Promise<void> | void): void;
+}
+/**
+ * Manifest adapter blocks are loose: `{ kind: string, ...host-extension }`.
+ * Each factory pulls its own typed fields off the config and validates
+ * them inline.
+ */
+interface AdapterConfig {
+    readonly kind: string;
+    readonly [extension: string]: unknown;
+}
+type SubstrateFactory = (config: AdapterConfig, ctx: AdapterContext) => Promise<Substrate> | Substrate;
+type DispatcherFactory = (config: AdapterConfig, ctx: AdapterContext) => Promise<Dispatcher> | Dispatcher;
+type ExecutorFactory = (config: AdapterConfig, ctx: AdapterContext) => Promise<ParticipantExecutor> | ParticipantExecutor;
+type StateStoreFactory = (config: AdapterConfig, ctx: AdapterContext) => Promise<StateStore> | StateStore;
+declare function registerSubstrate(kind: string, factory: SubstrateFactory): void;
+declare function registerDispatcher(kind: string, factory: DispatcherFactory): void;
+declare function registerExecutor(kind: string, factory: ExecutorFactory): void;
+declare function registerStateStore(kind: string, factory: StateStoreFactory): void;
+declare function getSubstrateFactory(kind: string): SubstrateFactory | undefined;
+declare function getDispatcherFactory(kind: string): DispatcherFactory | undefined;
+declare function getExecutorFactory(kind: string): ExecutorFactory | undefined;
+declare function getStateStoreFactory(kind: string): StateStoreFactory | undefined;
+declare function listRegisteredKinds(): {
+    substrates: readonly string[];
+    dispatchers: readonly string[];
+    executors: readonly string[];
+    stateStores: readonly string[];
+};
+/**
+ * Test-only: drop every registration. Plugin registrations persist for
+ * the lifetime of the process, so tests that load + unload plugins use
+ * this to start from a clean slate.
+ */
+declare function _resetRegistryForTests(): void;
+
+export { type AdapterConfig, type AdapterContext, type DispatcherFactory, type ExecutorFactory, type StateStoreFactory, type SubstrateFactory, _resetRegistryForTests, getDispatcherFactory, getExecutorFactory, getStateStoreFactory, getSubstrateFactory, listRegisteredKinds, registerDispatcher, registerExecutor, registerStateStore, registerSubstrate };

package/dist/registry/runtime.mjs

@@ -0,0 +1,52 @@
+/**
+ * @agentproto/cli v0.1.0-alpha
+ * The `agentproto` binary — install / run / serve AIP-45 agent CLIs.
+ */
+
+// src/registry/runtime.ts
+var substrates = /* @__PURE__ */ new Map();
+var dispatchers = /* @__PURE__ */ new Map();
+var executors = /* @__PURE__ */ new Map();
+var stateStores = /* @__PURE__ */ new Map();
+function registerSubstrate(kind, factory) {
+  substrates.set(kind, factory);
+}
+function registerDispatcher(kind, factory) {
+  dispatchers.set(kind, factory);
+}
+function registerExecutor(kind, factory) {
+  executors.set(kind, factory);
+}
+function registerStateStore(kind, factory) {
+  stateStores.set(kind, factory);
+}
+function getSubstrateFactory(kind) {
+  return substrates.get(kind);
+}
+function getDispatcherFactory(kind) {
+  return dispatchers.get(kind);
+}
+function getExecutorFactory(kind) {
+  return executors.get(kind);
+}
+function getStateStoreFactory(kind) {
+  return stateStores.get(kind);
+}
+function listRegisteredKinds() {
+  return {
+    substrates: [...substrates.keys()],
+    dispatchers: [...dispatchers.keys()],
+    executors: [...executors.keys()],
+    stateStores: [...stateStores.keys()]
+  };
+}
+function _resetRegistryForTests() {
+  substrates.clear();
+  dispatchers.clear();
+  executors.clear();
+  stateStores.clear();
+}
+
+export { _resetRegistryForTests, getDispatcherFactory, getExecutorFactory, getStateStoreFactory, getSubstrateFactory, listRegisteredKinds, registerDispatcher, registerExecutor, registerStateStore, registerSubstrate };
+//# sourceMappingURL=runtime.mjs.map
+//# sourceMappingURL=runtime.mjs.map

package/dist/registry/runtime.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/registry/runtime.ts"],"names":[],"mappings":";;;;;;AA+EA,IAAM,UAAA,uBAAiB,GAAA,EAA8B;AACrD,IAAM,WAAA,uBAAkB,GAAA,EAA+B;AACvD,IAAM,SAAA,uBAAgB,GAAA,EAA6B;AACnD,IAAM,WAAA,uBAAkB,GAAA,EAA+B;AAIhD,SAAS,iBAAA,CAAkB,MAAc,OAAA,EAAiC;AAC/E,EAAA,UAAA,CAAW,GAAA,CAAI,MAAM,OAAO,CAAA;AAC9B;AAEO,SAAS,kBAAA,CACd,MACA,OAAA,EACM;AACN,EAAA,WAAA,CAAY,GAAA,CAAI,MAAM,OAAO,CAAA;AAC/B;AAEO,SAAS,gBAAA,CAAiB,MAAc,OAAA,EAAgC;AAC7E,EAAA,SAAA,CAAU,GAAA,CAAI,MAAM,OAAO,CAAA;AAC7B;AAEO,SAAS,kBAAA,CACd,MACA,OAAA,EACM;AACN,EAAA,WAAA,CAAY,GAAA,CAAI,MAAM,OAAO,CAAA;AAC/B;AAIO,SAAS,oBAAoB,IAAA,EAA4C;AAC9E,EAAA,OAAO,UAAA,CAAW,IAAI,IAAI,CAAA;AAC5B;AAEO,SAAS,qBACd,IAAA,EAC+B;AAC/B,EAAA,OAAO,WAAA,CAAY,IAAI,IAAI,CAAA;AAC7B;AAEO,SAAS,mBAAmB,IAAA,EAA2C;AAC5E,EAAA,OAAO,SAAA,CAAU,IAAI,IAAI,CAAA;AAC3B;AAEO,SAAS,qBACd,IAAA,EAC+B;AAC/B,EAAA,OAAO,WAAA,CAAY,IAAI,IAAI,CAAA;AAC7B;AAEO,SAAS,mBAAA,GAKd;AACA,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,CAAC,GAAG,UAAA,CAAW,MAAM,CAAA;AAAA,IACjC,WAAA,EAAa,CAAC,GAAG,WAAA,CAAY,MAAM,CAAA;AAAA,IACnC,SAAA,EAAW,CAAC,GAAG,SAAA,CAAU,MAAM,CAAA;AAAA,IAC/B,WAAA,EAAa,CAAC,GAAG,WAAA,CAAY,MAAM;AAAA,GACrC;AACF;AAOO,SAAS,sBAAA,GAA+B;AAC7C,EAAA,UAAA,CAAW,KAAA,EAAM;AACjB,EAAA,WAAA,CAAY,KAAA,EAAM;AAClB,EAAA,SAAA,CAAU,KAAA,EAAM;AAChB,EAAA,WAAA,CAAY,KAAA,EAAM;AACpB","file":"runtime.mjs","sourcesContent":["/**\n * MultiAgentRuntime adapter registry — the seam third-party packages\n * use to plug substrates, dispatchers, participant executors, and\n * state stores into `agentproto run-swarm` without forking the CLI.\n *\n * A plugin module exports nothing required by name — it just imports\n * `register*` helpers from `@agentproto/cli/registry/runtime` and\n * calls them at module load. The CLI discovers plugins via:\n *\n *   1. `--plugin <module-id>` flags on `run-swarm`\n *   2. The `plugins[]` array in `~/.agentproto/config.json`\n *   3. Auto-registered built-ins (file substrate, mention dispatcher,\n *      fs state, agent-cli participant) — registered by\n *      `registerBuiltins()` at startup.\n *\n * Manifest `kind` strings are resolved through the registry: the kind\n * is the lookup key; the factory builds the concrete adapter from the\n * (loose) manifest config + shared context.\n */\n\nimport type {\n  Dispatcher,\n  ParticipantExecutor,\n  StateStore,\n  Substrate,\n} from \"@agentproto/agent-runtime\"\n\n// ── Context passed to every factory ──\n\n/**\n * Shared context every factory receives. Carries the manifest's base\n * directory (for resolving relative paths declared in adapter configs)\n * and a `cleanup` collector so adapters that hold disposable resources\n * (MCP clients, sockets, child processes) can register teardown callbacks\n * that the CLI runs on shutdown.\n */\nexport interface AdapterContext {\n  /** Absolute directory of the manifest file. */\n  readonly baseDir: string\n  /** Register a teardown callback to run when the swarm shuts down. */\n  registerCleanup(fn: () => Promise<void> | void): void\n}\n\n// ── Loose config shape ──\n\n/**\n * Manifest adapter blocks are loose: `{ kind: string, ...host-extension }`.\n * Each factory pulls its own typed fields off the config and validates\n * them inline.\n */\nexport interface AdapterConfig {\n  readonly kind: string\n  readonly [extension: string]: unknown\n}\n\n// ── Factory signatures ──\n\nexport type SubstrateFactory = (\n  config: AdapterConfig,\n  ctx: AdapterContext\n) => Promise<Substrate> | Substrate\n\nexport type DispatcherFactory = (\n  config: AdapterConfig,\n  ctx: AdapterContext\n) => Promise<Dispatcher> | Dispatcher\n\nexport type ExecutorFactory = (\n  config: AdapterConfig,\n  ctx: AdapterContext\n) => Promise<ParticipantExecutor> | ParticipantExecutor\n\nexport type StateStoreFactory = (\n  config: AdapterConfig,\n  ctx: AdapterContext\n) => Promise<StateStore> | StateStore\n\n// ── Registry state ──\n\nconst substrates = new Map<string, SubstrateFactory>()\nconst dispatchers = new Map<string, DispatcherFactory>()\nconst executors = new Map<string, ExecutorFactory>()\nconst stateStores = new Map<string, StateStoreFactory>()\n\n// ── Public registration API ──\n\nexport function registerSubstrate(kind: string, factory: SubstrateFactory): void {\n  substrates.set(kind, factory)\n}\n\nexport function registerDispatcher(\n  kind: string,\n  factory: DispatcherFactory\n): void {\n  dispatchers.set(kind, factory)\n}\n\nexport function registerExecutor(kind: string, factory: ExecutorFactory): void {\n  executors.set(kind, factory)\n}\n\nexport function registerStateStore(\n  kind: string,\n  factory: StateStoreFactory\n): void {\n  stateStores.set(kind, factory)\n}\n\n// ── Lookup API (used by run-swarm wiring) ──\n\nexport function getSubstrateFactory(kind: string): SubstrateFactory | undefined {\n  return substrates.get(kind)\n}\n\nexport function getDispatcherFactory(\n  kind: string\n): DispatcherFactory | undefined {\n  return dispatchers.get(kind)\n}\n\nexport function getExecutorFactory(kind: string): ExecutorFactory | undefined {\n  return executors.get(kind)\n}\n\nexport function getStateStoreFactory(\n  kind: string\n): StateStoreFactory | undefined {\n  return stateStores.get(kind)\n}\n\nexport function listRegisteredKinds(): {\n  substrates: readonly string[]\n  dispatchers: readonly string[]\n  executors: readonly string[]\n  stateStores: readonly string[]\n} {\n  return {\n    substrates: [...substrates.keys()],\n    dispatchers: [...dispatchers.keys()],\n    executors: [...executors.keys()],\n    stateStores: [...stateStores.keys()],\n  }\n}\n\n/**\n * Test-only: drop every registration. Plugin registrations persist for\n * the lifetime of the process, so tests that load + unload plugins use\n * this to start from a clean slate.\n */\nexport function _resetRegistryForTests(): void {\n  substrates.clear()\n  dispatchers.clear()\n  executors.clear()\n  stateStores.clear()\n}\n"]}

package/dist/util/credentials.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Credential store for `agentproto auth login`.
+ *
+ * Format on disk (JSON, mode 0600):
+ *
+ *   {
+ *     "version": 1,
+ *     "hosts": {
+ *       "wss://guilde.work/api/v1/agentproto/tunnel": {
+ *         "token": "eyJ…",
+ *         "tokenType": "Bearer",
+ *         "expiresAt": "2026-08-08T12:34:56.000Z",
+ *         "refreshToken": "rt_…",      // optional
+ *         "scope": "tunnel:connect",
+ *         "subject": "user_abc",
+ *         "obtainedAt": "2026-05-10T08:21:11.000Z",
+ *         "deviceLabel": "jeremy@laptop"
+ *       }
+ *     }
+ *   }
+ *
+ * One file per *user*, multiple hosts under the same file. Hosts are
+ * keyed by the URL the user passed to `agentproto auth login --host`,
+ * stripped of trailing slash. `agentproto serve --connect <url>` looks
+ * up the same key when no `--token` is passed.
+ *
+ * Storage location:
+ *   - `$AGENTPROTO_HOME/credentials.json`, falling back to
+ *   - `~/.agentproto/credentials.json`
+ *
+ * The file holds bearer tokens, so it's chmod'd 0600 on every write.
+ * On Windows we rely on the per-user profile path being already
+ * private and skip chmod. Never log the token contents.
+ */
+interface HostCredential {
+    /** Bearer token. Bearer-form is the only one supported for v1. */
+    token: string;
+    /** Always "Bearer" today; reserved for future schemes. */
+    tokenType: "Bearer";
+    /** ISO-8601. May be in the past — callers must check `isExpired`. */
+    expiresAt: string;
+    /** OAuth 2.0 refresh token. Present when the host issues one. */
+    refreshToken?: string;
+    /** Space-separated scopes the token was issued with. */
+    scope?: string;
+    /** Human-readable subject — usually the user id, surfaced in `auth status`. */
+    subject?: string;
+    /** ISO-8601 of when this credential was minted. */
+    obtainedAt: string;
+    /** Friendly device label shown on the host's Machine-tokens page. */
+    deviceLabel?: string;
+    /** Opaque revocation hint surfaced by the host (e.g. JTI). The CLI
+     *  passes it back on `auth logout` so the host can revoke the right
+     *  row server-side, not just delete the local copy. */
+    revocationId?: string;
+}
+interface CredentialsFile {
+    version: 1;
+    hosts: Record<string, HostCredential>;
+}
+declare function credentialsPath(): string;
+declare function normaliseHost(host: string): string;
+declare function loadCredentials(): Promise<CredentialsFile>;
+declare function saveCredentials(file: CredentialsFile): Promise<void>;
+declare function readHost(host: string): Promise<HostCredential | null>;
+declare function writeHost(host: string, cred: HostCredential): Promise<void>;
+declare function deleteHost(host: string): Promise<HostCredential | null>;
+declare function isExpired(cred: HostCredential, gracePeriodMs?: number): boolean;
+declare function formatExpiry(cred: HostCredential): string;
+
+export { type HostCredential, credentialsPath, deleteHost, formatExpiry, isExpired, loadCredentials, normaliseHost, readHost, saveCredentials, writeHost };

package/dist/util/credentials.mjs

@@ -0,0 +1,88 @@
+import { readFile, mkdir, writeFile, chmod, unlink } from 'fs/promises';
+import { homedir } from 'os';
+import { join, dirname } from 'path';
+
+/**
+ * @agentproto/cli v0.1.0-alpha
+ * The `agentproto` binary — install / run / serve AIP-45 agent CLIs.
+ */
+
+var FILE_VERSION = 1;
+function credentialsPath() {
+  const base = process.env["AGENTPROTO_HOME"] ?? join(homedir(), ".agentproto");
+  return join(base, "credentials.json");
+}
+function normaliseHost(host) {
+  return host.replace(/\/+$/, "");
+}
+async function loadCredentials() {
+  const path = credentialsPath();
+  try {
+    const raw = await readFile(path, "utf8");
+    const parsed = JSON.parse(raw);
+    if (parsed.version !== FILE_VERSION) {
+      throw new Error(
+        `credentials.json: unknown version ${parsed.version}; expected ${FILE_VERSION}. Delete the file and re-run \`agentproto auth login\`.`
+      );
+    }
+    return parsed;
+  } catch (err) {
+    if (err.code === "ENOENT") {
+      return { version: FILE_VERSION, hosts: {} };
+    }
+    throw err;
+  }
+}
+async function saveCredentials(file) {
+  const path = credentialsPath();
+  await mkdir(dirname(path), { recursive: true });
+  await writeFile(path, JSON.stringify(file, null, 2));
+  await chmod(path, 384).catch(() => {
+  });
+}
+async function readHost(host) {
+  const f = await loadCredentials();
+  return f.hosts[normaliseHost(host)] ?? null;
+}
+async function writeHost(host, cred) {
+  const f = await loadCredentials();
+  f.hosts[normaliseHost(host)] = cred;
+  await saveCredentials(f);
+}
+async function deleteHost(host) {
+  const f = await loadCredentials();
+  const key = normaliseHost(host);
+  const prev = f.hosts[key] ?? null;
+  if (prev) {
+    delete f.hosts[key];
+    if (Object.keys(f.hosts).length === 0) {
+      await unlink(credentialsPath()).catch(() => {
+      });
+    } else {
+      await saveCredentials(f);
+    }
+  }
+  return prev;
+}
+function isExpired(cred, gracePeriodMs = 3e4) {
+  const exp = Date.parse(cred.expiresAt);
+  if (!Number.isFinite(exp)) return false;
+  return exp - gracePeriodMs <= Date.now();
+}
+function formatExpiry(cred) {
+  const exp = new Date(cred.expiresAt);
+  if (Number.isNaN(exp.getTime())) return "unknown";
+  const ms = exp.getTime() - Date.now();
+  if (ms < 0) return `expired ${formatRelative(-ms)} ago`;
+  return `expires in ${formatRelative(ms)}`;
+}
+function formatRelative(ms) {
+  if (ms < 6e4) return `${Math.round(ms / 1e3)}s`;
+  if (ms < 36e5) return `${Math.round(ms / 6e4)}m`;
+  if (ms < 864e5) return `${Math.round(ms / 36e5)}h`;
+  return `${Math.round(ms / 864e5)}d`;
+}
+
+export { credentialsPath, deleteHost, formatExpiry, isExpired, loadCredentials, normaliseHost, readHost, saveCredentials, writeHost };
+//# sourceMappingURL=credentials.mjs.map
+//# sourceMappingURL=credentials.mjs.map

package/dist/util/credentials.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/util/credentials.ts"],"names":[],"mappings":";;;;;;;;;AAmEA,IAAM,YAAA,GAAe,CAAA;AAEd,SAAS,eAAA,GAA0B;AACxC,EAAA,MAAM,IAAA,GAAO,QAAQ,GAAA,CAAI,iBAAiB,KAAK,IAAA,CAAK,OAAA,IAAW,aAAa,CAAA;AAC5E,EAAA,OAAO,IAAA,CAAK,MAAM,kBAAkB,CAAA;AACtC;AAEO,SAAS,cAAc,IAAA,EAAsB;AAClD,EAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAChC;AAEA,eAAsB,eAAA,GAA4C;AAChE,EAAA,MAAM,OAAO,eAAA,EAAgB;AAC7B,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AACvC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC7B,IAAA,IAAI,MAAA,CAAO,YAAY,YAAA,EAAc;AACnC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,kCAAA,EAAqC,MAAA,CAAO,OAAO,CAAA,WAAA,EAAc,YAAY,CAAA,uDAAA;AAAA,OAE/E;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,GAAA,EAAK;AACZ,IAAA,IAAK,GAAA,CAA8B,SAAS,QAAA,EAAU;AACpD,MAAA,OAAO,EAAE,OAAA,EAAS,YAAA,EAAc,KAAA,EAAO,EAAC,EAAE;AAAA,IAC5C;AACA,IAAA,MAAM,GAAA;AAAA,EACR;AACF;AAEA,eAAsB,gBAAgB,IAAA,EAAsC;AAC1E,EAAA,MAAM,OAAO,eAAA,EAAgB;AAC7B,EAAA,MAAM,MAAM,OAAA,CAAQ,IAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,EAAA,MAAM,UAAU,IAAA,EAAM,IAAA,CAAK,UAAU,IAAA,EAAM,IAAA,EAAM,CAAC,CAAC,CAAA;AACnD,EAAA,MAAM,KAAA,CAAM,IAAA,EAAM,GAAK,CAAA,CAAE,MAAM,MAAM;AAAA,EAIrC,CAAC,CAAA;AACH;AAEA,eAAsB,SAAS,IAAA,EAA8C;AAC3E,EAAA,MAAM,CAAA,GAAI,MAAM,eAAA,EAAgB;AAChC,EAAA,OAAO,CAAA,CAAE,KAAA,CAAM,aAAA,CAAc,IAAI,CAAC,CAAA,IAAK,IAAA;AACzC;AAEA,eAAsB,SAAA,CACpB,MACA,IAAA,EACe;AACf,EAAA,MAAM,CAAA,GAAI,MAAM,eAAA,EAAgB;AAChC,EAAA,CAAA,CAAE,KAAA,CAAM,aAAA,CAAc,IAAI,CAAC,CAAA,GAAI,IAAA;AAC/B,EAAA,MAAM,gBAAgB,CAAC,CAAA;AACzB;AAEA,eAAsB,WAAW,IAAA,EAA8C;AAC7E,EAAA,MAAM,CAAA,GAAI,MAAM,eAAA,EAAgB;AAChC,EAAA,MAAM,GAAA,GAAM,cAAc,IAAI,CAAA;AAC9B,EAAA,MAAM,IAAA,GAAO,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,IAAK,IAAA;AAC7B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,OAAO,CAAA,CAAE,MAAM,GAAG,CAAA;AAClB,IAAA,IAAI,OAAO,IAAA,CAAK,CAAA,CAAE,KAAK,CAAA,CAAE,WAAW,CAAA,EAAG;AAGrC,MAAA,MAAM,MAAA,CAAO,eAAA,EAAiB,CAAA,CAAE,MAAM,MAAM;AAAA,MAAC,CAAC,CAAA;AAAA,IAChD,CAAA,MAAO;AACL,MAAA,MAAM,gBAAgB,CAAC,CAAA;AAAA,IACzB;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAEO,SAAS,SAAA,CAAU,IAAA,EAAsB,aAAA,GAAgB,GAAA,EAAiB;AAC/E,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,SAAS,CAAA;AACrC,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,GAAG,GAAG,OAAO,KAAA;AAClC,EAAA,OAAO,GAAA,GAAM,aAAA,IAAiB,IAAA,CAAK,GAAA,EAAI;AACzC;AAEO,SAAS,aAAa,IAAA,EAA8B;AACzD,EAAA,MAAM,GAAA,GAAM,IAAI,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA;AACnC,EAAA,IAAI,OAAO,KAAA,CAAM,GAAA,CAAI,OAAA,EAAS,GAAG,OAAO,SAAA;AACxC,EAAA,MAAM,EAAA,GAAK,GAAA,CAAI,OAAA,EAAQ,GAAI,KAAK,GAAA,EAAI;AACpC,EAAA,IAAI,KAAK,CAAA,EAAG,OAAO,WAAW,cAAA,CAAe,CAAC,EAAE,CAAC,CAAA,IAAA,CAAA;AACjD,EAAA,OAAO,CAAA,WAAA,EAAc,cAAA,CAAe,EAAE,CAAC,CAAA,CAAA;AACzC;AAEA,SAAS,eAAe,EAAA,EAAoB;AAC1C,EAAA,IAAI,EAAA,GAAK,KAAQ,OAAO,CAAA,EAAG,KAAK,KAAA,CAAM,EAAA,GAAK,GAAI,CAAC,CAAA,CAAA,CAAA;AAChD,EAAA,IAAI,EAAA,GAAK,MAAW,OAAO,CAAA,EAAG,KAAK,KAAA,CAAM,EAAA,GAAK,GAAM,CAAC,CAAA,CAAA,CAAA;AACrD,EAAA,IAAI,EAAA,GAAK,OAAY,OAAO,CAAA,EAAG,KAAK,KAAA,CAAM,EAAA,GAAK,IAAS,CAAC,CAAA,CAAA,CAAA;AACzD,EAAA,OAAO,CAAA,EAAG,IAAA,CAAK,KAAA,CAAM,EAAA,GAAK,KAAU,CAAC,CAAA,CAAA,CAAA;AACvC","file":"credentials.mjs","sourcesContent":["/**\n * Credential store for `agentproto auth login`.\n *\n * Format on disk (JSON, mode 0600):\n *\n *   {\n *     \"version\": 1,\n *     \"hosts\": {\n *       \"wss://guilde.work/api/v1/agentproto/tunnel\": {\n *         \"token\": \"eyJ…\",\n *         \"tokenType\": \"Bearer\",\n *         \"expiresAt\": \"2026-08-08T12:34:56.000Z\",\n *         \"refreshToken\": \"rt_…\",      // optional\n *         \"scope\": \"tunnel:connect\",\n *         \"subject\": \"user_abc\",\n *         \"obtainedAt\": \"2026-05-10T08:21:11.000Z\",\n *         \"deviceLabel\": \"jeremy@laptop\"\n *       }\n *     }\n *   }\n *\n * One file per *user*, multiple hosts under the same file. Hosts are\n * keyed by the URL the user passed to `agentproto auth login --host`,\n * stripped of trailing slash. `agentproto serve --connect <url>` looks\n * up the same key when no `--token` is passed.\n *\n * Storage location:\n *   - `$AGENTPROTO_HOME/credentials.json`, falling back to\n *   - `~/.agentproto/credentials.json`\n *\n * The file holds bearer tokens, so it's chmod'd 0600 on every write.\n * On Windows we rely on the per-user profile path being already\n * private and skip chmod. Never log the token contents.\n */\n\nimport { mkdir, readFile, writeFile, chmod, unlink } from \"node:fs/promises\"\nimport { homedir } from \"node:os\"\nimport { join, dirname } from \"node:path\"\n\nexport interface HostCredential {\n  /** Bearer token. Bearer-form is the only one supported for v1. */\n  token: string\n  /** Always \"Bearer\" today; reserved for future schemes. */\n  tokenType: \"Bearer\"\n  /** ISO-8601. May be in the past — callers must check `isExpired`. */\n  expiresAt: string\n  /** OAuth 2.0 refresh token. Present when the host issues one. */\n  refreshToken?: string\n  /** Space-separated scopes the token was issued with. */\n  scope?: string\n  /** Human-readable subject — usually the user id, surfaced in `auth status`. */\n  subject?: string\n  /** ISO-8601 of when this credential was minted. */\n  obtainedAt: string\n  /** Friendly device label shown on the host's Machine-tokens page. */\n  deviceLabel?: string\n  /** Opaque revocation hint surfaced by the host (e.g. JTI). The CLI\n   *  passes it back on `auth logout` so the host can revoke the right\n   *  row server-side, not just delete the local copy. */\n  revocationId?: string\n}\n\ninterface CredentialsFile {\n  version: 1\n  hosts: Record<string, HostCredential>\n}\n\nconst FILE_VERSION = 1 as const\n\nexport function credentialsPath(): string {\n  const base = process.env[\"AGENTPROTO_HOME\"] ?? join(homedir(), \".agentproto\")\n  return join(base, \"credentials.json\")\n}\n\nexport function normaliseHost(host: string): string {\n  return host.replace(/\\/+$/, \"\")\n}\n\nexport async function loadCredentials(): Promise<CredentialsFile> {\n  const path = credentialsPath()\n  try {\n    const raw = await readFile(path, \"utf8\")\n    const parsed = JSON.parse(raw) as CredentialsFile\n    if (parsed.version !== FILE_VERSION) {\n      throw new Error(\n        `credentials.json: unknown version ${parsed.version}; expected ${FILE_VERSION}. ` +\n          `Delete the file and re-run \\`agentproto auth login\\`.`\n      )\n    }\n    return parsed\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"ENOENT\") {\n      return { version: FILE_VERSION, hosts: {} }\n    }\n    throw err\n  }\n}\n\nexport async function saveCredentials(file: CredentialsFile): Promise<void> {\n  const path = credentialsPath()\n  await mkdir(dirname(path), { recursive: true })\n  await writeFile(path, JSON.stringify(file, null, 2))\n  await chmod(path, 0o600).catch(() => {\n    // Windows + some sandboxed FSes (e.g. WSL on a Windows mount) don't\n    // honour chmod. The file lives under the user profile in those\n    // cases, which is already user-private; not worth refusing.\n  })\n}\n\nexport async function readHost(host: string): Promise<HostCredential | null> {\n  const f = await loadCredentials()\n  return f.hosts[normaliseHost(host)] ?? null\n}\n\nexport async function writeHost(\n  host: string,\n  cred: HostCredential\n): Promise<void> {\n  const f = await loadCredentials()\n  f.hosts[normaliseHost(host)] = cred\n  await saveCredentials(f)\n}\n\nexport async function deleteHost(host: string): Promise<HostCredential | null> {\n  const f = await loadCredentials()\n  const key = normaliseHost(host)\n  const prev = f.hosts[key] ?? null\n  if (prev) {\n    delete f.hosts[key]\n    if (Object.keys(f.hosts).length === 0) {\n      // Empty file is a valid state (`auth login` re-creates), but\n      // unlinking is cleaner — `auth status` then prints \"no credentials\".\n      await unlink(credentialsPath()).catch(() => {})\n    } else {\n      await saveCredentials(f)\n    }\n  }\n  return prev\n}\n\nexport function isExpired(cred: HostCredential, gracePeriodMs = 30_000): boolean {\n  const exp = Date.parse(cred.expiresAt)\n  if (!Number.isFinite(exp)) return false // unparseable expiry → trust the host\n  return exp - gracePeriodMs <= Date.now()\n}\n\nexport function formatExpiry(cred: HostCredential): string {\n  const exp = new Date(cred.expiresAt)\n  if (Number.isNaN(exp.getTime())) return \"unknown\"\n  const ms = exp.getTime() - Date.now()\n  if (ms < 0) return `expired ${formatRelative(-ms)} ago`\n  return `expires in ${formatRelative(ms)}`\n}\n\nfunction formatRelative(ms: number): string {\n  if (ms < 60_000) return `${Math.round(ms / 1000)}s`\n  if (ms < 3_600_000) return `${Math.round(ms / 60_000)}m`\n  if (ms < 86_400_000) return `${Math.round(ms / 3_600_000)}h`\n  return `${Math.round(ms / 86_400_000)}d`\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentproto/cli",
-  "version": "0.1.0-alpha.8",
+  "version": "0.1.0",
   "description": "@agentproto/cli — the `agentproto` binary. Install AIP-45 agent CLI adapters, run them locally, or expose them over a tunnel as a long-running daemon. Reference host for hermes / claude-code / opencode / gemini-cli / goose, all driven through @agentproto/driver-agent-cli.",
   "keywords": [
     "agentproto",
@@ -36,7 +36,33 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.mjs",
       "default": "./dist/index.mjs"
-    }
+    },
+    "./registry/runtime": {
+      "types": "./dist/registry/runtime.d.ts",
+      "import": "./dist/registry/runtime.mjs",
+      "default": "./dist/registry/runtime.mjs"
+    },
+    "./registry/builtins": {
+      "types": "./dist/registry/builtins.d.ts",
+      "import": "./dist/registry/builtins.mjs",
+      "default": "./dist/registry/builtins.mjs"
+    },
+    "./registry/plugins": {
+      "types": "./dist/registry/plugins.d.ts",
+      "import": "./dist/registry/plugins.mjs",
+      "default": "./dist/registry/plugins.mjs"
+    },
+    "./registry/manifest": {
+      "types": "./dist/registry/manifest.d.ts",
+      "import": "./dist/registry/manifest.mjs",
+      "default": "./dist/registry/manifest.mjs"
+    },
+    "./util/credentials": {
+      "types": "./dist/util/credentials.d.ts",
+      "import": "./dist/util/credentials.mjs",
+      "default": "./dist/util/credentials.mjs"
+    },
+    "./package.json": "./package.json"
   },
   "files": [
     "dist",
@@ -47,8 +73,9 @@
     "gray-matter": "^4.0.3",
     "ws": "^8.20.0",
     "zod": "^4.4.3",
-    "@agentproto/driver-agent-cli": "0.1.0-alpha.1",
-    "@agentproto/acp": "0.1.0-alpha.2"
+    "@agentproto/runtime-profile-standard": "0.1.0",
+    "@agentproto/acp": "0.1.0",
+    "@agentproto/driver-agent-cli": "0.1.0"
   },
   "optionalDependencies": {
     "node-pty": "^1.0.0"
@@ -59,10 +86,11 @@
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
     "vitest": "^3.2.4",
-    "@agentproto/adapter-claude-code": "0.1.0-alpha.0",
     "@agentproto/adapter-hermes": "0.1.0-alpha.0",
-    "@agentproto/tooling": "0.1.0-alpha.0",
-    "@agentproto/runtime": "0.1.0-alpha.0"
+    "@agentproto/adapter-claude-code": "0.1.0-alpha.0",
+    "@agentproto/agent-runtime": "0.1.0-alpha.0",
+    "@agentproto/runtime": "0.1.0-alpha.0",
+    "@agentproto/tooling": "0.1.0-alpha.0"
   },
   "engines": {
     "node": ">=20.9.0"