@agimon-ai/doompi-config 0.0.1-alpha.8 → 0.0.1-alpha.80

package/README.md

@@ -1,13 +1,18 @@
 # @agimon-ai/doompi-config
 
-Shared Doom configuration loading and dependency injection.
+Typed runtime configuration and immutable session context for
+[DoomPi](https://www.npmjs.com/package/@agimon-ai/doompi).
 
-Loads and validates `.doom/`: major modes and their layers, domains, profiles, and the hook
-registry. Owns the resolved harness state file that every other reader derives from.
+This package is fixed core in the DoomPi distribution. It loads `config.yaml`, validates supported
+runtime settings, publishes the `doom/config` Cordis service, and maintains selection state shared
+by the major-mode, domain, and profile transition flows.
 
-Part of [Doompi](https://www.npmjs.com/package/@agimon-ai/doompi), a coding agent that loads
-only the skills and tools you name. This package is composed by Doompi and is not usually
-installed on its own.
+> **Alpha:** configuration contracts may change between releases.
+
+## Requirements
+
+- Node.js 22.19.0 or newer
+- Pi 0.85.0 as a peer dependency
 
 ## Install
 
@@ -15,21 +20,153 @@ installed on its own.
 npm install @agimon-ai/doompi-config
 ```
 
-## How it loads
+Do not add this package to a DoomPi layer. The distribution activates it before selectable packages
+so the rest of the parent session can consume one resolved configuration snapshot.
+
+## Runtime configuration
+
+DoomPi reads `~/.pi/.doom/config.yaml` first and `<repoRoot>/.doom/config.yaml` second. Merge policy
+is field-specific because some settings are personal and others are repository policy:
+
+| Setting             | Effective source policy                                              |
+| ------------------- | -------------------------------------------------------------------- |
+| `projectTrust`      | Repository value, defaulting to `ask`                                |
+| `editor`            | Personal config only                                                 |
+| `modes.planning`    | Personal and repository fields merge, with repository values winning |
+| `voice`             | Personal and repository fields merge, with repository values winning |
+| `voice.autoCapture` | Personal config only                                                 |
+| `selection`         | Per-axis merge, with repository values winning                       |
+
+Supported root keys are `modes`, `projectTrust`, `editor`, `voice`, and `selection`. Unknown keys and
+invalid values fail during loading.
+
+```yaml
+projectTrust: ask
+modes:
+  planning:
+    main:
+      model: openai/gpt-5.4
+      thinking: high
+    plansDirectory: .doom/plans
+voice:
+  engine: auto
+  language: en
+selection:
+  majorMode: copilot
+  domains: [default]
+  profile: reviewer
+```
+
+The `selection` mapping names defaults. Definitions for those axes live in `modes.yaml`,
+`domains.yaml`, and `profiles.yaml` and are documented by their owning package Help skills.
+
+See the shipped [configuration contract](./src/prompts/doompi-author-config/references/config-contract.md) for
+the complete runtime schema and additional configuration details.
+
+## Typed session context
+
+`@agimon-ai/doompi-config/extensions/pi` joins the runner-scoped Cordis host and provides
+`DOOM_CONFIG_SERVICE`. Consumers must access it under an owning service injection:
+
+```ts
+import { DOOM_CONFIG_SERVICE, type DoomConfigContext, requireDoomConfigContext } from '@agimon-ai/doompi-config';
+import type { Context } from '@deepseek-ai/cordis';
+
+export function consumeDoomConfig(context: Context, consume: (snapshot: DoomConfigContext) => void): void {
+  context.inject([DOOM_CONFIG_SERVICE], (configContext) => {
+    consume(requireDoomConfigContext(configContext));
+  });
+}
+```
+
+The snapshot is deeply frozen. It contains validated `settings`, active `harness` state, an optional
+`pendingSelection`, and `requiresRelaunch`. Do not mutate it or retain it across provider or session
+replacement. The next session publishes a new snapshot.
+
+## Plugin structure and lifecycle
+
+Pi and server entries live directly in `src/extensions`. HTTP request handling lives in routed `api/` files, package behavior in `src/services/{serviceName}`, and cached harness state in `src/models`. Public consumption modules remain flat under `src/exports`.
+
+The Pi entry uses `definePiExtension` with a Config service contribution and a typed `session_start` event. The shared helper owns mounting and disposal. Config publishes its readiness coordinator synchronously, loads configuration asynchronously, and waits at the session-start barrier before later features run. Session replacement cancels the prior generation and removes its Config and MCP projection services. Help contributions follow their optional provider without restarting Config.
+
+This session readiness barrier is separate from plugin `onStart`. Awaiting configuration during plugin mounting would block publication of the services that startup consumers need.
+
+## Selection transitions
+
+Major-mode, domain, and profile packages resolve their own requested changes, then use the shared
+transition coordinator. Config owns the persisted selection and transition journal records used to
+distinguish active state from pending intent.
+
+Transitions are serialized and compared with the active composition fingerprint. A compatible
+change can use Pi reload. A launcher-owned composition change records pending intent for process
+relaunch. A fresh session acknowledges a pending transition only when its exact target selection and
+composition are active.
+
+Consumers must not edit `snapshot.harness`, bypass the coordinator, or cache launcher environment
+state at module scope.
+
+## Public API
+
+The root and focused `/config` and `/piContext` exports provide runtime parsing, merge policy, and
+session integration:
+
+```ts
+import { loadDoomConfig } from '@agimon-ai/doompi-config';
+
+const settings = loadDoomConfig(process.cwd());
+```
+
+Pi-specific JSON settings are exposed through `/pi-config`; their types are exposed through `/config-schema`. The removed `/config/piConfig` and `/config/schema` paths have no aliases.
+
+The package also exposes lower-level loaders used by the fixed axis packages. User-facing guidance
+for defining modes, domains, and profiles is intentionally owned by those packages instead of this
+runtime Config authoring skill.
+
+## Help
+
+The package publishes `src/prompts/doompi-author-config`, links it from `llms.txt`, and registers
+`doompi-author-config` with the `doom/help` Cordis service. The guidance is visible to the AI only
+while the parent Help minor mode is active.
+
+## Remote session app
 
-Doompi loads this unconditionally. It is core, not a layer, so it does not appear in
-`.doom/modes.yaml`: making it optional would only create broken configurations.
+The remote-only `show_session` tool returns a read-only summary and links it to an MCP App.
+Compatible hosts render the repository name, session identity, revision, profile, domains, layers,
+and modes. Text-only clients receive the same information as readable text. `load_context` remains
+separate and does not open a widget.
 
-Extension entry: `@agimon-ai/doompi-config/pi`
+The component refreshes through the host's `tools/call` bridge. It receives no access token, does
+not contact localhost or an external asset server, and does not include instructions, persona text,
+or absolute repository paths. Conversation-routed connections still require host-supplied
+conversation metadata on every tool call, including refresh. A host that cannot preserve that
+metadata must use a dedicated-session connection; there is no fallback to a shared session.
 
-## Notes
+`build:mcp` first runs `build:app`. The browser SDK and HTML are bundled into
+`generated/mcp-apps/session.ts`, then embedded in the published MCP facet. The `ui://` resource URI
+contains a hash of the complete HTML. Do not edit generated assets or reuse an old URI for changed
+content. Resource reads are authorized static prefetches and never create a child session.
 
-This is the package that defines the config contract. Changing the shape of `.doom/*.yaml`
-starts here.
+Connect an MCP Apps host to the existing session MCP URL. After rebuilding and restarting the
+server, refresh the host's tool catalog and invoke `show_session`. ChatGPT developer-mode
+connections use the same endpoint. Public app submission, a stable production widget origin, and
+upstream third-party widget forwarding are separate deployment work.
+
+## Development
+
+```bash
+pnpm build
+pnpm typecheck
+pnpm test
+pnpm lint
+pnpm test:app
+```
 
-## Entry points
+The browser tests require Playwright Chromium (`pnpm exec playwright install chromium`). They
+exercise the packaged HTML in a sandboxed iframe using the standard SDK's `AppBridge`, including
+refresh, theme changes, errors, text safety, and teardown. They do not substitute for testing the
+connection inside ChatGPT itself.
 
-18 subpaths are declared in the `exports` field of `package.json`.
+Maintained by [Agimon](https://agimon.ai/about).
 
 ## License
 

package/dist/agentPluginMcp.cjs

@@ -0,0 +1,322 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
+let node_crypto = require("node:crypto");
+let node_fs = require("node:fs");
+node_fs = require_rolldown_runtime.__toESM(node_fs, 1);
+let node_http = require("node:http");
+let node_net = require("node:net");
+let node_path = require("node:path");
+node_path = require_rolldown_runtime.__toESM(node_path, 1);
+let _agimon_ai_doompi_core_mcpProjection = require("@agimon-ai/doompi-core/mcpProjection");
+//#region src/services/agentPluginMcp/index.ts
+const PRIVATE_FILE_MODE = 384;
+const PRIVATE_DIRECTORY_MODE = 448;
+const RESERVED_ENVIRONMENT_KEYS = /* @__PURE__ */ new Set(["PLUGIN_ROOT", "PLUGIN_DATA"]);
+const PROXY_SERVER_ALIASES = /* @__PURE__ */ new Set(["mcp-proxy", "agiflow-proxy"]);
+function isObject(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function onlyKeys(value, allowed, label) {
+	const unexpected = Object.keys(value).find((key) => !allowed.includes(key));
+	if (unexpected) throw new Error(`${label} contains unsupported field "${unexpected}"`);
+}
+function nonEmptyString(value, label) {
+	if (typeof value !== "string" || value.length === 0) throw new Error(`${label} must be a non-empty string`);
+	return value;
+}
+function optionalStringArray(value, label) {
+	if (value === void 0) return void 0;
+	if (!Array.isArray(value)) throw new Error(`${label} must be an array of strings`);
+	return value.map((item, index) => {
+		if (typeof item !== "string") throw new Error(`${label}[${index}] must be a string`);
+		return item;
+	});
+}
+function optionalStringRecord(value, label) {
+	if (value === void 0) return void 0;
+	if (!isObject(value)) throw new Error(`${label} must be an object of string values`);
+	return Object.fromEntries(Object.entries(value).map(([key, item]) => {
+		if (typeof item !== "string") throw new Error(`${label}.${key} must be a string`);
+		return [key, item];
+	}));
+}
+function expandPluginPlaceholders(value, pluginRoot, pluginDataDirectory) {
+	return value.replace(/\$\{PLUGIN_(ROOT|DATA)\}/gu, (placeholder) => placeholder === "${PLUGIN_ROOT}" ? pluginRoot : pluginDataDirectory);
+}
+function isInside(root, candidate) {
+	const relative = node_path.default.relative(root, candidate);
+	return relative === "" || !relative.startsWith(`..${node_path.default.sep}`) && relative !== ".." && !node_path.default.isAbsolute(relative);
+}
+function realContainedPath(root, candidate, label) {
+	let realCandidate;
+	try {
+		realCandidate = node_fs.default.realpathSync(candidate);
+	} catch {
+		throw new Error(`${label} does not exist`);
+	}
+	if (!isInside(root, realCandidate)) throw new Error(`${label} escapes its allowed plugin directory`);
+	return realCandidate;
+}
+function normalizeCommand(command, pluginRoot) {
+	if (command.startsWith("./")) {
+		const resolved = realContainedPath(pluginRoot, node_path.default.resolve(pluginRoot, command), "command");
+		if (!node_fs.default.statSync(resolved).isFile()) throw new Error("command must resolve to a regular file");
+		try {
+			node_fs.default.accessSync(resolved, node_fs.default.constants.X_OK);
+		} catch {
+			throw new Error("command must resolve to an executable file");
+		}
+		return resolved;
+	}
+	if (command === "." || command === ".." || /[\s/\\]/u.test(command)) throw new Error("command must be a bare executable name or a ./ path inside the plugin");
+	return command;
+}
+function normalizeWorkingDirectory(declared, pluginRoot, pluginDataDirectory) {
+	if (declared === void 0) return pluginRoot;
+	const cwd = nonEmptyString(declared, "cwd");
+	let base;
+	let expanded;
+	if (cwd.startsWith("./")) {
+		base = pluginRoot;
+		expanded = node_path.default.resolve(pluginRoot, cwd);
+	} else if (cwd === "${PLUGIN_ROOT}" || cwd.startsWith("${PLUGIN_ROOT}/")) {
+		base = pluginRoot;
+		expanded = expandPluginPlaceholders(cwd, pluginRoot, pluginDataDirectory);
+	} else if (cwd === "${PLUGIN_DATA}" || cwd.startsWith("${PLUGIN_DATA}/")) {
+		base = pluginDataDirectory;
+		expanded = expandPluginPlaceholders(cwd, pluginRoot, pluginDataDirectory);
+	} else throw new Error("cwd must start with ./, ${PLUGIN_ROOT}, or ${PLUGIN_DATA}");
+	const resolved = realContainedPath(base, node_path.default.resolve(expanded), "cwd");
+	if (!node_fs.default.statSync(resolved).isDirectory()) throw new Error("cwd must resolve to a directory");
+	return resolved;
+}
+function normalizeEnvironment(value, pluginRoot, pluginDataDirectory) {
+	const declared = optionalStringRecord(value, "env") ?? {};
+	for (const key of Object.keys(declared)) {
+		const reservedKey = process.platform === "win32" ? key.toUpperCase() : key;
+		if (RESERVED_ENVIRONMENT_KEYS.has(reservedKey)) throw new Error(`env key "${key}" is reserved by Agent Plugins`);
+	}
+	return {
+		...Object.fromEntries(Object.entries(declared).map(([key, item]) => [key, expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory)])),
+		PLUGIN_ROOT: pluginRoot,
+		PLUGIN_DATA: pluginDataDirectory
+	};
+}
+function isLoopbackHost(hostname) {
+	const bareHostname = hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
+	if (bareHostname.toLowerCase() === "localhost") return true;
+	const family = (0, node_net.isIP)(bareHostname);
+	if (family === 4) return bareHostname.split(".")[0] === "127";
+	return family === 6 && bareHostname === "::1";
+}
+function normalizeUrl(value) {
+	const raw = nonEmptyString(value, "url");
+	let parsed;
+	try {
+		parsed = new URL(raw);
+	} catch {
+		throw new Error("url must be an absolute HTTP(S) URL");
+	}
+	if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw new Error("url must use http or https");
+	if (parsed.username || parsed.password) throw new Error("url must not contain user information");
+	if (parsed.hash) throw new Error("url must not contain a fragment");
+	if (parsed.protocol === "http:" && !isLoopbackHost(parsed.hostname)) throw new Error("non-loopback MCP URLs must use https");
+	return raw;
+}
+function normalizeHeaders(value) {
+	const headers = optionalStringRecord(value, "headers");
+	if (!headers) return void 0;
+	const seen = /* @__PURE__ */ new Set();
+	for (const [name, item] of Object.entries(headers)) {
+		const canonical = name.toLowerCase();
+		if (seen.has(canonical)) throw new Error(`headers contain duplicate name "${name}"`);
+		seen.add(canonical);
+		try {
+			(0, node_http.validateHeaderName)(name);
+			(0, node_http.validateHeaderValue)(name, item);
+		} catch {
+			throw new Error(`header "${name}" is invalid`);
+		}
+	}
+	return headers;
+}
+function normalizeServer(raw, pluginRoot, pluginDataDirectory, name) {
+	if (!isObject(raw)) throw new Error("definition must be an object");
+	const type = nonEmptyString(raw.type, "type");
+	if (type === "stdio") {
+		onlyKeys(raw, [
+			"type",
+			"command",
+			"args",
+			"env",
+			"cwd"
+		], `server "${name}"`);
+		const command = normalizeCommand(nonEmptyString(raw.command, "command"), pluginRoot);
+		const args = optionalStringArray(raw.args, "args")?.map((item) => expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory));
+		const env = normalizeEnvironment(raw.env, pluginRoot, pluginDataDirectory);
+		const cwd = normalizeWorkingDirectory(raw.cwd, pluginRoot, pluginDataDirectory);
+		const config = {
+			command,
+			...args ? { args } : {},
+			env,
+			cwd
+		};
+		return {
+			internal: {
+				name,
+				transport: "stdio",
+				config
+			},
+			claude: {
+				type: "stdio",
+				...config
+			}
+		};
+	}
+	if (type === "streamable-http" || type === "sse") {
+		onlyKeys(raw, [
+			"type",
+			"url",
+			"headers"
+		], `server "${name}"`);
+		const url = normalizeUrl(raw.url);
+		const headers = normalizeHeaders(raw.headers);
+		const transport = type === "streamable-http" ? "http" : "sse";
+		const config = {
+			url,
+			...headers ? { headers } : {}
+		};
+		return {
+			internal: {
+				name,
+				transport,
+				config
+			},
+			claude: {
+				type: transport,
+				...config
+			}
+		};
+	}
+	throw new Error(`unsupported transport type "${type}"`);
+}
+function stagedInternalPath(source, contents, stagingDirectory) {
+	const digest = (0, node_crypto.createHash)("sha256").update(source.sourceId).update("\0").update(source.contentDigest).update("\0").update(contents).digest("hex").slice(0, 20);
+	return node_path.default.join(stagingDirectory, `agent-plugin-mcp-${digest}.internal.json`);
+}
+function writeStagedInternalConfig(target, contents, stagingDirectory) {
+	node_fs.default.mkdirSync(stagingDirectory, {
+		mode: PRIVATE_DIRECTORY_MODE,
+		recursive: true
+	});
+	node_fs.default.chmodSync(stagingDirectory, PRIVATE_DIRECTORY_MODE);
+	const temporaryPath = `${target}.${process.pid}-${(0, node_crypto.randomUUID)()}.tmp`;
+	try {
+		node_fs.default.writeFileSync(temporaryPath, contents, {
+			flag: "wx",
+			mode: PRIVATE_FILE_MODE
+		});
+		try {
+			node_fs.default.renameSync(temporaryPath, target);
+		} catch (error) {
+			const code = error.code;
+			if (code !== "EEXIST" && code !== "EPERM") throw error;
+			const stat = node_fs.default.lstatSync(target);
+			if (stat.isSymbolicLink() || !stat.isFile() || node_fs.default.readFileSync(target, "utf8") !== contents) throw new Error("content-addressed staging path is occupied by different content");
+		}
+		node_fs.default.chmodSync(target, PRIVATE_FILE_MODE);
+	} finally {
+		node_fs.default.rmSync(temporaryPath, { force: true });
+	}
+}
+function emptyResult(diagnostic) {
+	return {
+		claudeConfig: { mcpServers: {} },
+		serverNames: [],
+		droppedServers: [],
+		diagnostics: [diagnostic]
+	};
+}
+/**
+* Validates one Agent Plugins v1 `mcp.json` and stages a native mcp-proxy layer.
+*
+* Server validation is isolated: one malformed server is diagnosed and skipped.
+* Document/schema, source identity, or plugin-boundary failures reject the whole
+* source. Only the two portable plugin placeholders are expanded; the staged
+* layer is tagged `internal`, so legacy `${ENV}` interpolation cannot run again.
+*/
+function normalizeAgentPluginMcpSource(source, options) {
+	const label = `Agent Plugin MCP source "${source.sourceId}"`;
+	try {
+		if (source.mcpSchemaUrl !== _agimon_ai_doompi_core_mcpProjection.AGENT_PLUGIN_MCP_SCHEMA_URL) throw new Error(`unsupported schema "${String(source.mcpSchemaUrl)}"`);
+		if (!node_path.default.isAbsolute(source.pluginRoot) || !node_path.default.isAbsolute(source.pluginDataDirectory)) throw new Error("pluginRoot and pluginDataDirectory must be absolute");
+		const pluginRoot = node_fs.default.realpathSync(source.pluginRoot);
+		try {
+			const dataStat = node_fs.default.lstatSync(source.pluginDataDirectory);
+			if (dataStat.isSymbolicLink() || !dataStat.isDirectory()) throw new Error("pluginDataDirectory must be a real directory");
+		} catch (error) {
+			if (error.code !== "ENOENT") throw error;
+			node_fs.default.mkdirSync(source.pluginDataDirectory, {
+				mode: PRIVATE_DIRECTORY_MODE,
+				recursive: true
+			});
+		}
+		node_fs.default.chmodSync(source.pluginDataDirectory, PRIVATE_DIRECTORY_MODE);
+		node_fs.default.accessSync(source.pluginDataDirectory, node_fs.default.constants.W_OK);
+		const pluginDataDirectory = node_fs.default.realpathSync(source.pluginDataDirectory);
+		const configPath = realContainedPath(pluginRoot, source.configPath, "mcp.json");
+		if (node_path.default.dirname(configPath) !== pluginRoot || node_path.default.basename(configPath) !== "mcp.json") throw new Error("portable plugin config must be root mcp.json");
+		const bytes = node_fs.default.readFileSync(configPath);
+		if ((0, node_crypto.createHash)("sha256").update(bytes).digest("hex") !== source.contentDigest) throw new Error("content digest does not match the projection");
+		const parsed = JSON.parse(bytes.toString("utf8"));
+		if (!isObject(parsed)) throw new Error("document must be an object");
+		onlyKeys(parsed, ["$schema", "mcpServers"], label);
+		if (parsed.$schema !== source.mcpSchemaUrl) throw new Error("$schema does not match the projected schema");
+		if (!isObject(parsed.mcpServers)) throw new Error("mcpServers must be an object");
+		const allowed = options.allowedServers;
+		const keepAll = !allowed || allowed.length === 0;
+		const stripProxyWrappers = options.stripProxyWrappers ?? true;
+		const internalServers = Object.create(null);
+		const claudeServers = Object.create(null);
+		const droppedServers = [];
+		const diagnostics = [];
+		for (const [name, rawServer] of Object.entries(parsed.mcpServers)) {
+			if (!name) {
+				diagnostics.push(`${label} contains an empty server name; that entry was skipped.`);
+				continue;
+			}
+			if (!keepAll && !allowed.includes(name) || stripProxyWrappers && PROXY_SERVER_ALIASES.has(name)) {
+				droppedServers.push(name);
+				continue;
+			}
+			try {
+				const normalized = normalizeServer(rawServer, pluginRoot, pluginDataDirectory, name);
+				internalServers[name] = normalized.internal;
+				claudeServers[name] = normalized.claude;
+			} catch (error) {
+				droppedServers.push(name);
+				diagnostics.push(`${label} skipped server "${name}": ${error instanceof Error ? error.message : String(error)}`);
+			}
+		}
+		const contents = `${JSON.stringify({ mcpServers: internalServers }, null, 2)}\n`;
+		const target = stagedInternalPath(source, contents, options.stagingDirectory);
+		writeStagedInternalConfig(target, contents, options.stagingDirectory);
+		return {
+			configSource: {
+				path: target,
+				format: "internal",
+				cacheKey: (0, node_crypto.createHash)("sha256").update("agent-plugin-v1\0").update(source.sourceId).update("\0").update(source.contentDigest).update("\0").update(configPath).update("\0").update(contents).digest("hex")
+			},
+			claudeConfig: { mcpServers: claudeServers },
+			serverNames: Object.keys(internalServers),
+			droppedServers,
+			diagnostics
+		};
+	} catch (error) {
+		return emptyResult(`${label} was disabled: ${error instanceof Error ? error.message : String(error)}`);
+	}
+}
+//#endregion
+exports.normalizeAgentPluginMcpSource = normalizeAgentPluginMcpSource;
+
+//# sourceMappingURL=agentPluginMcp.cjs.map

package/dist/agentPluginMcp.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentPluginMcp.cjs","names":["path","fs","isIP","createHash","randomUUID","AGENT_PLUGIN_MCP_SCHEMA_URL"],"sources":["../src/services/agentPluginMcp/index.ts"],"sourcesContent":["import { createHash, randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport { validateHeaderName, validateHeaderValue } from 'node:http';\nimport { isIP } from 'node:net';\nimport path from 'node:path';\n\nimport {\n  AGENT_PLUGIN_MCP_SCHEMA_URL,\n  type DoomMcpAgentPluginProjectionSource,\n} from '@agimon-ai/doompi-core/mcpProjection';\n\nconst PRIVATE_FILE_MODE = 0o600;\nconst PRIVATE_DIRECTORY_MODE = 0o700;\nconst RESERVED_ENVIRONMENT_KEYS = new Set(['PLUGIN_ROOT', 'PLUGIN_DATA']);\nconst PROXY_SERVER_ALIASES = new Set(['mcp-proxy', 'agiflow-proxy']);\n\ntype JsonObject = Record<string, unknown>;\n\nexport interface AgentPluginMcpConfigSource {\n  path: string;\n  format: 'internal';\n  cacheKey: string;\n}\n\nexport interface NormalizedAgentPluginMcpSource {\n  /** Owner-only, content-addressed layer that bypasses Claude env interpolation. */\n  configSource?: AgentPluginMcpConfigSource;\n  /** Claude-compatible definitions for an external merged config. */\n  claudeConfig: { mcpServers: Record<string, JsonObject> };\n  serverNames: string[];\n  droppedServers: string[];\n  diagnostics: string[];\n}\n\nexport interface NormalizeAgentPluginMcpOptions {\n  stagingDirectory: string;\n  /** Empty and absent lists both mean keep every server. */\n  allowedServers?: readonly string[];\n  /** Doom strips nested wrappers; external-only callers may opt out. */\n  stripProxyWrappers?: boolean;\n}\n\ninterface NormalizedServer {\n  internal: JsonObject;\n  claude: JsonObject;\n}\n\nfunction isObject(value: unknown): value is JsonObject {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction onlyKeys(value: JsonObject, allowed: readonly string[], label: string): void {\n  const unexpected = Object.keys(value).find((key) => !allowed.includes(key));\n  if (unexpected) throw new Error(`${label} contains unsupported field \"${unexpected}\"`);\n}\n\nfunction nonEmptyString(value: unknown, label: string): string {\n  if (typeof value !== 'string' || value.length === 0) throw new Error(`${label} must be a non-empty string`);\n  return value;\n}\n\nfunction optionalStringArray(value: unknown, label: string): string[] | undefined {\n  if (value === undefined) return undefined;\n  if (!Array.isArray(value)) throw new Error(`${label} must be an array of strings`);\n  return value.map((item, index) => {\n    if (typeof item !== 'string') throw new Error(`${label}[${index}] must be a string`);\n    return item;\n  });\n}\n\nfunction optionalStringRecord(value: unknown, label: string): Record<string, string> | undefined {\n  if (value === undefined) return undefined;\n  if (!isObject(value)) throw new Error(`${label} must be an object of string values`);\n  return Object.fromEntries(\n    Object.entries(value).map(([key, item]) => {\n      if (typeof item !== 'string') throw new Error(`${label}.${key} must be a string`);\n      return [key, item];\n    }),\n  );\n}\n\nfunction expandPluginPlaceholders(value: string, pluginRoot: string, pluginDataDirectory: string): string {\n  // The portable contract is a single, non-recursive replacement pass. An\n  // unrecognised placeholder remains literal and mcp-proxy must not reinterpret it.\n  return value.replace(/\\$\\{PLUGIN_(ROOT|DATA)\\}/gu, (placeholder) =>\n    placeholder === '${PLUGIN_ROOT}' ? pluginRoot : pluginDataDirectory,\n  );\n}\n\nfunction isInside(root: string, candidate: string): boolean {\n  const relative = path.relative(root, candidate);\n  return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));\n}\n\nfunction realContainedPath(root: string, candidate: string, label: string): string {\n  let realCandidate: string;\n  try {\n    realCandidate = fs.realpathSync(candidate);\n  } catch {\n    throw new Error(`${label} does not exist`);\n  }\n  if (!isInside(root, realCandidate)) throw new Error(`${label} escapes its allowed plugin directory`);\n  return realCandidate;\n}\n\nfunction normalizeCommand(command: string, pluginRoot: string): string {\n  if (command.startsWith('./')) {\n    const resolved = realContainedPath(pluginRoot, path.resolve(pluginRoot, command), 'command');\n    if (!fs.statSync(resolved).isFile()) throw new Error('command must resolve to a regular file');\n    try {\n      fs.accessSync(resolved, fs.constants.X_OK);\n    } catch {\n      throw new Error('command must resolve to an executable file');\n    }\n    return resolved;\n  }\n  if (command === '.' || command === '..' || /[\\s/\\\\]/u.test(command)) {\n    throw new Error('command must be a bare executable name or a ./ path inside the plugin');\n  }\n  return command;\n}\n\nfunction normalizeWorkingDirectory(declared: unknown, pluginRoot: string, pluginDataDirectory: string): string {\n  if (declared === undefined) return pluginRoot;\n  const cwd = nonEmptyString(declared, 'cwd');\n  let base: string;\n  let expanded: string;\n  if (cwd.startsWith('./')) {\n    base = pluginRoot;\n    expanded = path.resolve(pluginRoot, cwd);\n  } else if (cwd === '${PLUGIN_ROOT}' || cwd.startsWith('${PLUGIN_ROOT}/')) {\n    base = pluginRoot;\n    expanded = expandPluginPlaceholders(cwd, pluginRoot, pluginDataDirectory);\n  } else if (cwd === '${PLUGIN_DATA}' || cwd.startsWith('${PLUGIN_DATA}/')) {\n    base = pluginDataDirectory;\n    expanded = expandPluginPlaceholders(cwd, pluginRoot, pluginDataDirectory);\n  } else {\n    throw new Error('cwd must start with ./, ${PLUGIN_ROOT}, or ${PLUGIN_DATA}');\n  }\n  const resolved = realContainedPath(base, path.resolve(expanded), 'cwd');\n  if (!fs.statSync(resolved).isDirectory()) throw new Error('cwd must resolve to a directory');\n  return resolved;\n}\n\nfunction normalizeEnvironment(value: unknown, pluginRoot: string, pluginDataDirectory: string): Record<string, string> {\n  const declared = optionalStringRecord(value, 'env') ?? {};\n  for (const key of Object.keys(declared)) {\n    const reservedKey = process.platform === 'win32' ? key.toUpperCase() : key;\n    if (RESERVED_ENVIRONMENT_KEYS.has(reservedKey)) {\n      throw new Error(`env key \"${key}\" is reserved by Agent Plugins`);\n    }\n  }\n  return {\n    ...Object.fromEntries(\n      Object.entries(declared).map(([key, item]) => [\n        key,\n        expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n      ]),\n    ),\n    PLUGIN_ROOT: pluginRoot,\n    PLUGIN_DATA: pluginDataDirectory,\n  };\n}\n\nfunction isLoopbackHost(hostname: string): boolean {\n  const bareHostname = hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname;\n  if (bareHostname.toLowerCase() === 'localhost') return true;\n  const family = isIP(bareHostname);\n  if (family === 4) return bareHostname.split('.')[0] === '127';\n  return family === 6 && bareHostname === '::1';\n}\n\nfunction normalizeUrl(value: unknown): string {\n  const raw = nonEmptyString(value, 'url');\n  let parsed: URL;\n  try {\n    parsed = new URL(raw);\n  } catch {\n    throw new Error('url must be an absolute HTTP(S) URL');\n  }\n  if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {\n    throw new Error('url must use http or https');\n  }\n  if (parsed.username || parsed.password) throw new Error('url must not contain user information');\n  if (parsed.hash) throw new Error('url must not contain a fragment');\n  if (parsed.protocol === 'http:' && !isLoopbackHost(parsed.hostname)) {\n    throw new Error('non-loopback MCP URLs must use https');\n  }\n  return raw;\n}\n\nfunction normalizeHeaders(value: unknown): Record<string, string> | undefined {\n  const headers = optionalStringRecord(value, 'headers');\n  if (!headers) return undefined;\n  const seen = new Set<string>();\n  for (const [name, item] of Object.entries(headers)) {\n    const canonical = name.toLowerCase();\n    if (seen.has(canonical)) throw new Error(`headers contain duplicate name \"${name}\"`);\n    seen.add(canonical);\n    try {\n      validateHeaderName(name);\n      validateHeaderValue(name, item);\n    } catch {\n      throw new Error(`header \"${name}\" is invalid`);\n    }\n  }\n  return headers;\n}\n\nfunction normalizeServer(\n  raw: unknown,\n  pluginRoot: string,\n  pluginDataDirectory: string,\n  name: string,\n): NormalizedServer {\n  if (!isObject(raw)) throw new Error('definition must be an object');\n  const type = nonEmptyString(raw.type, 'type');\n  if (type === 'stdio') {\n    onlyKeys(raw, ['type', 'command', 'args', 'env', 'cwd'], `server \"${name}\"`);\n    const command = normalizeCommand(nonEmptyString(raw.command, 'command'), pluginRoot);\n    const args = optionalStringArray(raw.args, 'args')?.map((item) =>\n      expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n    );\n    const env = normalizeEnvironment(raw.env, pluginRoot, pluginDataDirectory);\n    const cwd = normalizeWorkingDirectory(raw.cwd, pluginRoot, pluginDataDirectory);\n    const config = { command, ...(args ? { args } : {}), env, cwd };\n    return {\n      internal: { name, transport: 'stdio', config },\n      claude: { type: 'stdio', ...config },\n    };\n  }\n\n  if (type === 'streamable-http' || type === 'sse') {\n    onlyKeys(raw, ['type', 'url', 'headers'], `server \"${name}\"`);\n    const url = normalizeUrl(raw.url);\n    const headers = normalizeHeaders(raw.headers);\n    const transport = type === 'streamable-http' ? 'http' : 'sse';\n    const config = { url, ...(headers ? { headers } : {}) };\n    return {\n      internal: { name, transport, config },\n      claude: { type: transport, ...config },\n    };\n  }\n\n  throw new Error(`unsupported transport type \"${type}\"`);\n}\n\nfunction stagedInternalPath(\n  source: DoomMcpAgentPluginProjectionSource,\n  contents: string,\n  stagingDirectory: string,\n): string {\n  const digest = createHash('sha256')\n    .update(source.sourceId)\n    .update('\\0')\n    .update(source.contentDigest)\n    .update('\\0')\n    .update(contents)\n    .digest('hex')\n    .slice(0, 20);\n  return path.join(stagingDirectory, `agent-plugin-mcp-${digest}.internal.json`);\n}\n\nfunction writeStagedInternalConfig(target: string, contents: string, stagingDirectory: string): void {\n  fs.mkdirSync(stagingDirectory, { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n  fs.chmodSync(stagingDirectory, PRIVATE_DIRECTORY_MODE);\n  const temporaryPath = `${target}.${process.pid}-${randomUUID()}.tmp`;\n  try {\n    fs.writeFileSync(temporaryPath, contents, { flag: 'wx', mode: PRIVATE_FILE_MODE });\n    try {\n      fs.renameSync(temporaryPath, target);\n    } catch (error) {\n      const code = (error as NodeJS.ErrnoException).code;\n      if (code !== 'EEXIST' && code !== 'EPERM') throw error;\n      const stat = fs.lstatSync(target);\n      if (stat.isSymbolicLink() || !stat.isFile() || fs.readFileSync(target, 'utf8') !== contents) {\n        throw new Error('content-addressed staging path is occupied by different content');\n      }\n    }\n    fs.chmodSync(target, PRIVATE_FILE_MODE);\n  } finally {\n    fs.rmSync(temporaryPath, { force: true });\n  }\n}\n\nfunction emptyResult(diagnostic: string): NormalizedAgentPluginMcpSource {\n  return {\n    claudeConfig: { mcpServers: {} },\n    serverNames: [],\n    droppedServers: [],\n    diagnostics: [diagnostic],\n  };\n}\n\n/**\n * Validates one Agent Plugins v1 `mcp.json` and stages a native mcp-proxy layer.\n *\n * Server validation is isolated: one malformed server is diagnosed and skipped.\n * Document/schema, source identity, or plugin-boundary failures reject the whole\n * source. Only the two portable plugin placeholders are expanded; the staged\n * layer is tagged `internal`, so legacy `${ENV}` interpolation cannot run again.\n */\nexport function normalizeAgentPluginMcpSource(\n  source: DoomMcpAgentPluginProjectionSource,\n  options: NormalizeAgentPluginMcpOptions,\n): NormalizedAgentPluginMcpSource {\n  const label = `Agent Plugin MCP source \"${source.sourceId}\"`;\n  try {\n    if (source.mcpSchemaUrl !== AGENT_PLUGIN_MCP_SCHEMA_URL) {\n      throw new Error(`unsupported schema \"${String(source.mcpSchemaUrl)}\"`);\n    }\n    if (!path.isAbsolute(source.pluginRoot) || !path.isAbsolute(source.pluginDataDirectory)) {\n      throw new Error('pluginRoot and pluginDataDirectory must be absolute');\n    }\n    const pluginRoot = fs.realpathSync(source.pluginRoot);\n    try {\n      const dataStat = fs.lstatSync(source.pluginDataDirectory);\n      if (dataStat.isSymbolicLink() || !dataStat.isDirectory()) {\n        throw new Error('pluginDataDirectory must be a real directory');\n      }\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw error;\n      fs.mkdirSync(source.pluginDataDirectory, { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n    }\n    fs.chmodSync(source.pluginDataDirectory, PRIVATE_DIRECTORY_MODE);\n    fs.accessSync(source.pluginDataDirectory, fs.constants.W_OK);\n    const pluginDataDirectory = fs.realpathSync(source.pluginDataDirectory);\n    const configPath = realContainedPath(pluginRoot, source.configPath, 'mcp.json');\n    if (path.dirname(configPath) !== pluginRoot || path.basename(configPath) !== 'mcp.json') {\n      throw new Error('portable plugin config must be root mcp.json');\n    }\n\n    const bytes = fs.readFileSync(configPath);\n    const digest = createHash('sha256').update(bytes).digest('hex');\n    if (digest !== source.contentDigest) throw new Error('content digest does not match the projection');\n    const parsed: unknown = JSON.parse(bytes.toString('utf8'));\n    if (!isObject(parsed)) throw new Error('document must be an object');\n    onlyKeys(parsed, ['$schema', 'mcpServers'], label);\n    if (parsed.$schema !== source.mcpSchemaUrl) throw new Error('$schema does not match the projected schema');\n    if (!isObject(parsed.mcpServers)) throw new Error('mcpServers must be an object');\n\n    const allowed = options.allowedServers;\n    const keepAll = !allowed || allowed.length === 0;\n    const stripProxyWrappers = options.stripProxyWrappers ?? true;\n    const internalServers = Object.create(null) as Record<string, JsonObject>;\n    const claudeServers = Object.create(null) as Record<string, JsonObject>;\n    const droppedServers: string[] = [];\n    const diagnostics: string[] = [];\n\n    for (const [name, rawServer] of Object.entries(parsed.mcpServers)) {\n      if (!name) {\n        diagnostics.push(`${label} contains an empty server name; that entry was skipped.`);\n        continue;\n      }\n      if ((!keepAll && !allowed.includes(name)) || (stripProxyWrappers && PROXY_SERVER_ALIASES.has(name))) {\n        droppedServers.push(name);\n        continue;\n      }\n      try {\n        const normalized = normalizeServer(rawServer, pluginRoot, pluginDataDirectory, name);\n        internalServers[name] = normalized.internal;\n        claudeServers[name] = normalized.claude;\n      } catch (error) {\n        droppedServers.push(name);\n        diagnostics.push(\n          `${label} skipped server \"${name}\": ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    }\n\n    const internalConfig = { mcpServers: internalServers };\n    const contents = `${JSON.stringify(internalConfig, null, 2)}\\n`;\n    const target = stagedInternalPath(source, contents, options.stagingDirectory);\n    writeStagedInternalConfig(target, contents, options.stagingDirectory);\n    const cacheKey = createHash('sha256')\n      .update('agent-plugin-v1\\0')\n      .update(source.sourceId)\n      .update('\\0')\n      .update(source.contentDigest)\n      .update('\\0')\n      .update(configPath)\n      .update('\\0')\n      .update(contents)\n      .digest('hex');\n\n    return {\n      configSource: { path: target, format: 'internal', cacheKey },\n      claudeConfig: { mcpServers: claudeServers },\n      serverNames: Object.keys(internalServers),\n      droppedServers,\n      diagnostics,\n    };\n  } catch (error) {\n    return emptyResult(`${label} was disabled: ${error instanceof Error ? error.message : String(error)}`);\n  }\n}\n"],"mappings":";;;;;;;;;;;AAWA,MAAM,oBAAoB;AAC1B,MAAM,yBAAyB;AAC/B,MAAM,4CAA4B,IAAI,IAAI,CAAC,eAAe,aAAa,CAAC;AACxE,MAAM,uCAAuB,IAAI,IAAI,CAAC,aAAa,eAAe,CAAC;AAiCnE,SAAS,SAAS,OAAqC;CACrD,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,SAAS,OAAmB,SAA4B,OAAqB;CACpF,MAAM,aAAa,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,SAAS,GAAG,CAAC;CAC1E,IAAI,YAAY,MAAM,IAAI,MAAM,GAAG,MAAM,+BAA+B,WAAW,EAAE;AACvF;AAEA,SAAS,eAAe,OAAgB,OAAuB;CAC7D,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CAC1G,OAAO;AACT;AAEA,SAAS,oBAAoB,OAAgB,OAAqC;CAChF,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,6BAA6B;CACjF,OAAO,MAAM,KAAK,MAAM,UAAU;EAChC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,mBAAmB;EACnF,OAAO;CACT,CAAC;AACH;AAEA,SAAS,qBAAqB,OAAgB,OAAmD;CAC/F,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,oCAAoC;CACnF,OAAO,OAAO,YACZ,OAAO,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU;EACzC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,kBAAkB;EAChF,OAAO,CAAC,KAAK,IAAI;CACnB,CAAC,CACH;AACF;AAEA,SAAS,yBAAyB,OAAe,YAAoB,qBAAqC;CAGxG,OAAO,MAAM,QAAQ,+BAA+B,gBAClD,gBAAgB,mBAAmB,aAAa,mBAClD;AACF;AAEA,SAAS,SAAS,MAAc,WAA4B;CAC1D,MAAM,WAAWA,UAAAA,QAAK,SAAS,MAAM,SAAS;CAC9C,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,KAAKA,UAAAA,QAAK,KAAK,KAAK,aAAa,QAAQ,CAACA,UAAAA,QAAK,WAAW,QAAQ;AACpH;AAEA,SAAS,kBAAkB,MAAc,WAAmB,OAAuB;CACjF,IAAI;CACJ,IAAI;EACF,gBAAgBC,QAAAA,QAAG,aAAa,SAAS;CAC3C,QAAQ;EACN,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB;CAC3C;CACA,IAAI,CAAC,SAAS,MAAM,aAAa,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,sCAAsC;CACnG,OAAO;AACT;AAEA,SAAS,iBAAiB,SAAiB,YAA4B;CACrE,IAAI,QAAQ,WAAW,IAAI,GAAG;EAC5B,MAAM,WAAW,kBAAkB,YAAYD,UAAAA,QAAK,QAAQ,YAAY,OAAO,GAAG,SAAS;EAC3F,IAAI,CAACC,QAAAA,QAAG,SAAS,QAAQ,CAAC,CAAC,OAAO,GAAG,MAAM,IAAI,MAAM,wCAAwC;EAC7F,IAAI;GACF,QAAA,QAAG,WAAW,UAAUA,QAAAA,QAAG,UAAU,IAAI;EAC3C,QAAQ;GACN,MAAM,IAAI,MAAM,4CAA4C;EAC9D;EACA,OAAO;CACT;CACA,IAAI,YAAY,OAAO,YAAY,QAAQ,WAAW,KAAK,OAAO,GAChE,MAAM,IAAI,MAAM,uEAAuE;CAEzF,OAAO;AACT;AAEA,SAAS,0BAA0B,UAAmB,YAAoB,qBAAqC;CAC7G,IAAI,aAAa,KAAA,GAAW,OAAO;CACnC,MAAM,MAAM,eAAe,UAAU,KAAK;CAC1C,IAAI;CACJ,IAAI;CACJ,IAAI,IAAI,WAAW,IAAI,GAAG;EACxB,OAAO;EACP,WAAWD,UAAAA,QAAK,QAAQ,YAAY,GAAG;CACzC,OAAO,IAAI,QAAQ,oBAAoB,IAAI,WAAW,iBAAiB,GAAG;EACxE,OAAO;EACP,WAAW,yBAAyB,KAAK,YAAY,mBAAmB;CAC1E,OAAO,IAAI,QAAQ,oBAAoB,IAAI,WAAW,iBAAiB,GAAG;EACxE,OAAO;EACP,WAAW,yBAAyB,KAAK,YAAY,mBAAmB;CAC1E,OACE,MAAM,IAAI,MAAM,2DAA2D;CAE7E,MAAM,WAAW,kBAAkB,MAAMA,UAAAA,QAAK,QAAQ,QAAQ,GAAG,KAAK;CACtE,IAAI,CAACC,QAAAA,QAAG,SAAS,QAAQ,CAAC,CAAC,YAAY,GAAG,MAAM,IAAI,MAAM,iCAAiC;CAC3F,OAAO;AACT;AAEA,SAAS,qBAAqB,OAAgB,YAAoB,qBAAqD;CACrH,MAAM,WAAW,qBAAqB,OAAO,KAAK,KAAK,CAAC;CACxD,KAAK,MAAM,OAAO,OAAO,KAAK,QAAQ,GAAG;EACvC,MAAM,cAAc,QAAQ,aAAa,UAAU,IAAI,YAAY,IAAI;EACvE,IAAI,0BAA0B,IAAI,WAAW,GAC3C,MAAM,IAAI,MAAM,YAAY,IAAI,+BAA+B;CAEnE;CACA,OAAO;EACL,GAAG,OAAO,YACR,OAAO,QAAQ,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU,CAC5C,KACA,yBAAyB,MAAM,YAAY,mBAAmB,CAChE,CAAC,CACH;EACA,aAAa;EACb,aAAa;CACf;AACF;AAEA,SAAS,eAAe,UAA2B;CACjD,MAAM,eAAe,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG,IAAI,SAAS,MAAM,GAAG,EAAE,IAAI;CAClG,IAAI,aAAa,YAAY,MAAM,aAAa,OAAO;CACvD,MAAM,UAAA,GAASC,SAAAA,KAAAA,CAAK,YAAY;CAChC,IAAI,WAAW,GAAG,OAAO,aAAa,MAAM,GAAG,CAAC,CAAC,OAAO;CACxD,OAAO,WAAW,KAAK,iBAAiB;AAC1C;AAEA,SAAS,aAAa,OAAwB;CAC5C,MAAM,MAAM,eAAe,OAAO,KAAK;CACvC,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN,MAAM,IAAI,MAAM,qCAAqC;CACvD;CACA,IAAI,OAAO,aAAa,WAAW,OAAO,aAAa,UACrD,MAAM,IAAI,MAAM,4BAA4B;CAE9C,IAAI,OAAO,YAAY,OAAO,UAAU,MAAM,IAAI,MAAM,uCAAuC;CAC/F,IAAI,OAAO,MAAM,MAAM,IAAI,MAAM,iCAAiC;CAClE,IAAI,OAAO,aAAa,WAAW,CAAC,eAAe,OAAO,QAAQ,GAChE,MAAM,IAAI,MAAM,sCAAsC;CAExD,OAAO;AACT;AAEA,SAAS,iBAAiB,OAAoD;CAC5E,MAAM,UAAU,qBAAqB,OAAO,SAAS;CACrD,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,OAAO,GAAG;EAClD,MAAM,YAAY,KAAK,YAAY;EACnC,IAAI,KAAK,IAAI,SAAS,GAAG,MAAM,IAAI,MAAM,mCAAmC,KAAK,EAAE;EACnF,KAAK,IAAI,SAAS;EAClB,IAAI;GACF,CAAA,GAAA,UAAA,mBAAA,CAAmB,IAAI;GACvB,CAAA,GAAA,UAAA,oBAAA,CAAoB,MAAM,IAAI;EAChC,QAAQ;GACN,MAAM,IAAI,MAAM,WAAW,KAAK,aAAa;EAC/C;CACF;CACA,OAAO;AACT;AAEA,SAAS,gBACP,KACA,YACA,qBACA,MACkB;CAClB,IAAI,CAAC,SAAS,GAAG,GAAG,MAAM,IAAI,MAAM,8BAA8B;CAClE,MAAM,OAAO,eAAe,IAAI,MAAM,MAAM;CAC5C,IAAI,SAAS,SAAS;EACpB,SAAS,KAAK;GAAC;GAAQ;GAAW;GAAQ;GAAO;EAAK,GAAG,WAAW,KAAK,EAAE;EAC3E,MAAM,UAAU,iBAAiB,eAAe,IAAI,SAAS,SAAS,GAAG,UAAU;EACnF,MAAM,OAAO,oBAAoB,IAAI,MAAM,MAAM,CAAC,EAAE,KAAK,SACvD,yBAAyB,MAAM,YAAY,mBAAmB,CAChE;EACA,MAAM,MAAM,qBAAqB,IAAI,KAAK,YAAY,mBAAmB;EACzE,MAAM,MAAM,0BAA0B,IAAI,KAAK,YAAY,mBAAmB;EAC9E,MAAM,SAAS;GAAE;GAAS,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;GAAI;GAAK;EAAI;EAC9D,OAAO;GACL,UAAU;IAAE;IAAM,WAAW;IAAS;GAAO;GAC7C,QAAQ;IAAE,MAAM;IAAS,GAAG;GAAO;EACrC;CACF;CAEA,IAAI,SAAS,qBAAqB,SAAS,OAAO;EAChD,SAAS,KAAK;GAAC;GAAQ;GAAO;EAAS,GAAG,WAAW,KAAK,EAAE;EAC5D,MAAM,MAAM,aAAa,IAAI,GAAG;EAChC,MAAM,UAAU,iBAAiB,IAAI,OAAO;EAC5C,MAAM,YAAY,SAAS,oBAAoB,SAAS;EACxD,MAAM,SAAS;GAAE;GAAK,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;EAAG;EACtD,OAAO;GACL,UAAU;IAAE;IAAM;IAAW;GAAO;GACpC,QAAQ;IAAE,MAAM;IAAW,GAAG;GAAO;EACvC;CACF;CAEA,MAAM,IAAI,MAAM,+BAA+B,KAAK,EAAE;AACxD;AAEA,SAAS,mBACP,QACA,UACA,kBACQ;CACR,MAAM,UAAA,GAASC,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAChC,OAAO,OAAO,QAAQ,CAAC,CACvB,OAAO,IAAI,CAAC,CACZ,OAAO,OAAO,aAAa,CAAC,CAC5B,OAAO,IAAI,CAAC,CACZ,OAAO,QAAQ,CAAC,CAChB,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EAAE;CACd,OAAOH,UAAAA,QAAK,KAAK,kBAAkB,oBAAoB,OAAO,eAAe;AAC/E;AAEA,SAAS,0BAA0B,QAAgB,UAAkB,kBAAgC;CACnG,QAAA,QAAG,UAAU,kBAAkB;EAAE,MAAM;EAAwB,WAAW;CAAK,CAAC;CAChF,QAAA,QAAG,UAAU,kBAAkB,sBAAsB;CACrD,MAAM,gBAAgB,GAAG,OAAO,GAAG,QAAQ,IAAI,IAAA,GAAGI,YAAAA,WAAAA,CAAW,EAAE;CAC/D,IAAI;EACF,QAAA,QAAG,cAAc,eAAe,UAAU;GAAE,MAAM;GAAM,MAAM;EAAkB,CAAC;EACjF,IAAI;GACF,QAAA,QAAG,WAAW,eAAe,MAAM;EACrC,SAAS,OAAO;GACd,MAAM,OAAQ,MAAgC;GAC9C,IAAI,SAAS,YAAY,SAAS,SAAS,MAAM;GACjD,MAAM,OAAOH,QAAAA,QAAG,UAAU,MAAM;GAChC,IAAI,KAAK,eAAe,KAAK,CAAC,KAAK,OAAO,KAAKA,QAAAA,QAAG,aAAa,QAAQ,MAAM,MAAM,UACjF,MAAM,IAAI,MAAM,iEAAiE;EAErF;EACA,QAAA,QAAG,UAAU,QAAQ,iBAAiB;CACxC,UAAU;EACR,QAAA,QAAG,OAAO,eAAe,EAAE,OAAO,KAAK,CAAC;CAC1C;AACF;AAEA,SAAS,YAAY,YAAoD;CACvE,OAAO;EACL,cAAc,EAAE,YAAY,CAAC,EAAE;EAC/B,aAAa,CAAC;EACd,gBAAgB,CAAC;EACjB,aAAa,CAAC,UAAU;CAC1B;AACF;;;;;;;;;AAUA,SAAgB,8BACd,QACA,SACgC;CAChC,MAAM,QAAQ,4BAA4B,OAAO,SAAS;CAC1D,IAAI;EACF,IAAI,OAAO,iBAAiBI,qCAAAA,6BAC1B,MAAM,IAAI,MAAM,uBAAuB,OAAO,OAAO,YAAY,EAAE,EAAE;EAEvE,IAAI,CAACL,UAAAA,QAAK,WAAW,OAAO,UAAU,KAAK,CAACA,UAAAA,QAAK,WAAW,OAAO,mBAAmB,GACpF,MAAM,IAAI,MAAM,qDAAqD;EAEvE,MAAM,aAAaC,QAAAA,QAAG,aAAa,OAAO,UAAU;EACpD,IAAI;GACF,MAAM,WAAWA,QAAAA,QAAG,UAAU,OAAO,mBAAmB;GACxD,IAAI,SAAS,eAAe,KAAK,CAAC,SAAS,YAAY,GACrD,MAAM,IAAI,MAAM,8CAA8C;EAElE,SAAS,OAAO;GACd,IAAK,MAAgC,SAAS,UAAU,MAAM;GAC9D,QAAA,QAAG,UAAU,OAAO,qBAAqB;IAAE,MAAM;IAAwB,WAAW;GAAK,CAAC;EAC5F;EACA,QAAA,QAAG,UAAU,OAAO,qBAAqB,sBAAsB;EAC/D,QAAA,QAAG,WAAW,OAAO,qBAAqBA,QAAAA,QAAG,UAAU,IAAI;EAC3D,MAAM,sBAAsBA,QAAAA,QAAG,aAAa,OAAO,mBAAmB;EACtE,MAAM,aAAa,kBAAkB,YAAY,OAAO,YAAY,UAAU;EAC9E,IAAID,UAAAA,QAAK,QAAQ,UAAU,MAAM,cAAcA,UAAAA,QAAK,SAAS,UAAU,MAAM,YAC3E,MAAM,IAAI,MAAM,8CAA8C;EAGhE,MAAM,QAAQC,QAAAA,QAAG,aAAa,UAAU;EAExC,KAAA,GADeE,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAChD,MAAM,OAAO,eAAe,MAAM,IAAI,MAAM,8CAA8C;EACnG,MAAM,SAAkB,KAAK,MAAM,MAAM,SAAS,MAAM,CAAC;EACzD,IAAI,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,4BAA4B;EACnE,SAAS,QAAQ,CAAC,WAAW,YAAY,GAAG,KAAK;EACjD,IAAI,OAAO,YAAY,OAAO,cAAc,MAAM,IAAI,MAAM,6CAA6C;EACzG,IAAI,CAAC,SAAS,OAAO,UAAU,GAAG,MAAM,IAAI,MAAM,8BAA8B;EAEhF,MAAM,UAAU,QAAQ;EACxB,MAAM,UAAU,CAAC,WAAW,QAAQ,WAAW;EAC/C,MAAM,qBAAqB,QAAQ,sBAAsB;EACzD,MAAM,kBAAkB,OAAO,OAAO,IAAI;EAC1C,MAAM,gBAAgB,OAAO,OAAO,IAAI;EACxC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAE/B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,OAAO,UAAU,GAAG;GACjE,IAAI,CAAC,MAAM;IACT,YAAY,KAAK,GAAG,MAAM,wDAAwD;IAClF;GACF;GACA,IAAK,CAAC,WAAW,CAAC,QAAQ,SAAS,IAAI,KAAO,sBAAsB,qBAAqB,IAAI,IAAI,GAAI;IACnG,eAAe,KAAK,IAAI;IACxB;GACF;GACA,IAAI;IACF,MAAM,aAAa,gBAAgB,WAAW,YAAY,qBAAqB,IAAI;IACnF,gBAAgB,QAAQ,WAAW;IACnC,cAAc,QAAQ,WAAW;GACnC,SAAS,OAAO;IACd,eAAe,KAAK,IAAI;IACxB,YAAY,KACV,GAAG,MAAM,mBAAmB,KAAK,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAC7F;GACF;EACF;EAGA,MAAM,WAAW,GAAG,KAAK,UAAU,EADV,YAAY,gBACW,GAAG,MAAM,CAAC,EAAE;EAC5D,MAAM,SAAS,mBAAmB,QAAQ,UAAU,QAAQ,gBAAgB;EAC5E,0BAA0B,QAAQ,UAAU,QAAQ,gBAAgB;EAYpE,OAAO;GACL,cAAc;IAAE,MAAM;IAAQ,QAAQ;IAAY,WAAA,GAZnCA,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAClC,OAAO,mBAAmB,CAAC,CAC3B,OAAO,OAAO,QAAQ,CAAC,CACvB,OAAO,IAAI,CAAC,CACZ,OAAO,OAAO,aAAa,CAAC,CAC5B,OAAO,IAAI,CAAC,CACZ,OAAO,UAAU,CAAC,CAClB,OAAO,IAAI,CAAC,CACZ,OAAO,QAAQ,CAAC,CAChB,OAAO,KAGiD;GAAE;GAC3D,cAAc,EAAE,YAAY,cAAc;GAC1C,aAAa,OAAO,KAAK,eAAe;GACxC;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO,YAAY,GAAG,MAAM,iBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;CACvG;AACF"}

package/dist/agentPluginMcp.d.mts

@@ -0,0 +1,38 @@
+import { DoomMcpAgentPluginProjectionSource } from "@agimon-ai/doompi-core/mcpProjection";
+//#region src/services/agentPluginMcp/index.d.ts
+type JsonObject = Record<string, unknown>;
+interface AgentPluginMcpConfigSource {
+  path: string;
+  format: 'internal';
+  cacheKey: string;
+}
+interface NormalizedAgentPluginMcpSource {
+  /** Owner-only, content-addressed layer that bypasses Claude env interpolation. */
+  configSource?: AgentPluginMcpConfigSource;
+  /** Claude-compatible definitions for an external merged config. */
+  claudeConfig: {
+    mcpServers: Record<string, JsonObject>;
+  };
+  serverNames: string[];
+  droppedServers: string[];
+  diagnostics: string[];
+}
+interface NormalizeAgentPluginMcpOptions {
+  stagingDirectory: string;
+  /** Empty and absent lists both mean keep every server. */
+  allowedServers?: readonly string[];
+  /** Doom strips nested wrappers; external-only callers may opt out. */
+  stripProxyWrappers?: boolean;
+}
+/**
+ * Validates one Agent Plugins v1 `mcp.json` and stages a native mcp-proxy layer.
+ *
+ * Server validation is isolated: one malformed server is diagnosed and skipped.
+ * Document/schema, source identity, or plugin-boundary failures reject the whole
+ * source. Only the two portable plugin placeholders are expanded; the staged
+ * layer is tagged `internal`, so legacy `${ENV}` interpolation cannot run again.
+ */
+export declare function normalizeAgentPluginMcpSource(source: DoomMcpAgentPluginProjectionSource, options: NormalizeAgentPluginMcpOptions): NormalizedAgentPluginMcpSource;
+//#endregion
+export type { AgentPluginMcpConfigSource, NormalizeAgentPluginMcpOptions, NormalizedAgentPluginMcpSource };
+//# sourceMappingURL=agentPluginMcp.d.mts.map

package/dist/agentPluginMcp.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentPluginMcp.d.mts","names":[],"sources":["../src/services/agentPluginMcp/index.ts"],"mappings":";;KAgBK,aAAa;UAED;EACf;EACA;EACA;;UAGe;;EAEf,eAAe;;EAEf;IAAgB,YAAY,eAAe;;EAC3C;EACA;EACA;;UAGe;EACf;;EAEA;;EAEA;;;;;;;;;;wBAuQc,8BACd,QAAQ,oCACR,SAAS,iCACR"}