@agimon-ai/po-config 0.0.0-alpha.2 → 0.0.0-alpha.21
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +149 -21
- package/README.md +11 -11
- package/dist/agentPluginMcp.cjs +313 -134
- package/dist/agentPluginMcp.cjs.map +1 -1
- package/dist/agentPluginMcp.d.mts +22 -4
- package/dist/agentPluginMcp.d.mts.map +1 -1
- package/dist/agentPluginMcp.mjs +312 -134
- package/dist/agentPluginMcp.mjs.map +1 -1
- package/dist/apiContracts.cjs.map +1 -1
- package/dist/apiContracts.mjs.map +1 -1
- package/dist/atomicJson-D3MHqnLW.cjs +59 -0
- package/dist/atomicJson-D3MHqnLW.cjs.map +1 -0
- package/dist/atomicJson-Dj3rlZbD.mjs +40 -0
- package/dist/atomicJson-Dj3rlZbD.mjs.map +1 -0
- package/dist/atomicJson.cjs +4 -2
- package/dist/atomicJson.d.mts +2 -2
- package/dist/atomicJson.mjs +3 -2
- package/dist/{index-BT29GZx5.d.mts → completion-Ba0TiBHa.d.mts} +58 -27
- package/dist/completion-Ba0TiBHa.d.mts.map +1 -0
- package/dist/config-BBvn_ZLP.mjs +1 -0
- package/dist/config-Cdybp9rT.cjs +155 -0
- package/dist/config-Cdybp9rT.cjs.map +1 -0
- package/dist/config-Cxc2xw54.mjs +112 -0
- package/dist/config-Cxc2xw54.mjs.map +1 -0
- package/dist/{config-D2HbBLzo.d.mts → config-pxC7FyUJ.d.mts} +33 -33
- package/dist/config-pxC7FyUJ.d.mts.map +1 -0
- package/dist/config.cjs +21 -17
- package/dist/config.d.mts +3 -3
- package/dist/config.mjs +4 -3
- package/dist/{configPolicy-Ce1QKDxa.cjs → configPolicy-CowlLhK1.cjs} +99 -99
- package/dist/configPolicy-CowlLhK1.cjs.map +1 -0
- package/dist/{configPolicy-DCQgF5-f.mjs → configPolicy-DueX0k6i.mjs} +84 -84
- package/dist/configPolicy-DueX0k6i.mjs.map +1 -0
- package/dist/configSchema.d.mts +2 -2
- package/dist/configWriter-DCASRzr-.mjs +180 -0
- package/dist/configWriter-DCASRzr-.mjs.map +1 -0
- package/dist/configWriter-DGO0gmXo.cjs +218 -0
- package/dist/configWriter-DGO0gmXo.cjs.map +1 -0
- package/dist/configWriter.cjs +7 -4
- package/dist/configWriter.d.mts +2 -2
- package/dist/configWriter.mjs +1 -2
- package/dist/core-B0Qg0Qq2.cjs +224 -0
- package/dist/core-B0Qg0Qq2.cjs.map +1 -0
- package/dist/core-DKWW9gkh.mjs +139 -0
- package/dist/core-DKWW9gkh.mjs.map +1 -0
- package/dist/{domains-DGCb7uMC.cjs → domains-CiDUsRiX.cjs} +473 -171
- package/dist/domains-CiDUsRiX.cjs.map +1 -0
- package/dist/{domains-BroCVHrS.mjs → domains-IlieGHaY.mjs} +437 -170
- package/dist/domains-IlieGHaY.mjs.map +1 -0
- package/dist/domains.cjs +9 -3
- package/dist/domains.d.mts +3 -3
- package/dist/domains.mjs +3 -3
- package/dist/extensions/mcp-ui.mjs +1 -1
- package/dist/extensions/mcp-ui.mjs.map +1 -1
- package/dist/extensions/mcp.cjs +3 -3
- package/dist/extensions/mcp.cjs.map +1 -1
- package/dist/extensions/mcp.d.mts +1 -1
- package/dist/extensions/mcp.mjs +2 -2
- package/dist/extensions/mcp.mjs.map +1 -1
- package/dist/extensions/server.cjs +55 -47
- package/dist/extensions/server.cjs.map +1 -1
- package/dist/extensions/server.d.mts +2 -2
- package/dist/extensions/server.d.mts.map +1 -1
- package/dist/extensions/server.mjs +56 -48
- package/dist/extensions/server.mjs.map +1 -1
- package/dist/{harnessState-Dn_S7fB9.mjs → harnessState-8lZda_8r.mjs} +2 -2
- package/dist/{harnessState-Dn_S7fB9.mjs.map → harnessState-8lZda_8r.mjs.map} +1 -1
- package/dist/{harnessState-CCyBeutB.cjs → harnessState-BrmH0lG5.cjs} +2 -2
- package/dist/{harnessState-CCyBeutB.cjs.map → harnessState-BrmH0lG5.cjs.map} +1 -1
- package/dist/harnessState.cjs +1 -1
- package/dist/harnessState.d.mts +1 -1
- package/dist/harnessState.mjs +1 -2
- package/dist/{harnessStore-CJSxdSkV.cjs → harnessStore-BinxGITh.cjs} +189 -81
- package/dist/harnessStore-BinxGITh.cjs.map +1 -0
- package/dist/{harnessStore-CltwLB7M.mjs → harnessStore-w8zHmJ_H.mjs} +160 -82
- package/dist/harnessStore-w8zHmJ_H.mjs.map +1 -0
- package/dist/harnessStore.cjs +6 -1
- package/dist/harnessStore.d.mts +2 -2
- package/dist/harnessStore.mjs +1 -2
- package/dist/index-7RuIAWX1.d.mts +63 -0
- package/dist/index-7RuIAWX1.d.mts.map +1 -0
- package/dist/{index-CkDDvVQt.d.mts → index-BNcG0voG.d.mts} +61 -16
- package/dist/index-BNcG0voG.d.mts.map +1 -0
- package/dist/{index-Dy_-m7gx.d.mts → index-BTOU4XiI.d.mts} +3 -3
- package/dist/{index-Dy_-m7gx.d.mts.map → index-BTOU4XiI.d.mts.map} +1 -1
- package/dist/index-COokUToB.d.mts +83 -0
- package/dist/index-COokUToB.d.mts.map +1 -0
- package/dist/index-D3vGEYup.d.mts +135 -0
- package/dist/index-D3vGEYup.d.mts.map +1 -0
- package/dist/{index-Ch7ptOkW.d.mts → index-DNEK9W6n.d.mts} +26 -16
- package/dist/index-DNEK9W6n.d.mts.map +1 -0
- package/dist/index-D_OtYtsl.d.mts +37 -0
- package/dist/index-D_OtYtsl.d.mts.map +1 -0
- package/dist/{index-DNk4q0Qm.d.mts → index-Nbj2iQWw.d.mts} +19 -25
- package/dist/index-Nbj2iQWw.d.mts.map +1 -0
- package/dist/{index-CEUc7m16.d.mts → index-dYgF03lE.d.mts} +82 -32
- package/dist/index-dYgF03lE.d.mts.map +1 -0
- package/dist/index-fTuf8tVH.d.mts +34 -0
- package/dist/index-fTuf8tVH.d.mts.map +1 -0
- package/dist/index-nVcEC1jO.d.mts +62 -0
- package/dist/index-nVcEC1jO.d.mts.map +1 -0
- package/dist/index.cjs +81 -59
- package/dist/index.d.mts +16 -15
- package/dist/index.mjs +17 -15
- package/dist/{init-Cd3Ki6Ub.cjs → init-BdZ-gqqk.cjs} +209 -59
- package/dist/init-BdZ-gqqk.cjs.map +1 -0
- package/dist/{init-DVzhiCUE.mjs → init-DG7MxGxC.mjs} +187 -48
- package/dist/init-DG7MxGxC.mjs.map +1 -0
- package/dist/init.cjs +8 -6
- package/dist/init.d.mts +2 -2
- package/dist/init.mjs +1 -2
- package/dist/layeredConfig-BbkoIEfM.mjs +95 -0
- package/dist/layeredConfig-BbkoIEfM.mjs.map +1 -0
- package/dist/layeredConfig-Bs18dXQG.cjs +127 -0
- package/dist/layeredConfig-Bs18dXQG.cjs.map +1 -0
- package/dist/layeredConfig.cjs +5 -4
- package/dist/layeredConfig.d.mts +7 -2
- package/dist/layeredConfig.d.mts.map +1 -0
- package/dist/layeredConfig.mjs +1 -2
- package/dist/{majorModes-D1Itd8SN.mjs → majorModes-B8Km83e1.mjs} +130 -23
- package/dist/majorModes-B8Km83e1.mjs.map +1 -0
- package/dist/{majorModes-DnNSH9ZK.cjs → majorModes-CLccNMZt.cjs} +147 -22
- package/dist/majorModes-CLccNMZt.cjs.map +1 -0
- package/dist/majorModes.cjs +4 -1
- package/dist/majorModes.d.mts +2 -2
- package/dist/majorModes.mjs +1 -2
- package/dist/{piConfig-qGyCbcVj.mjs → piConfig-Bq36PQFF.mjs} +104 -69
- package/dist/piConfig-Bq36PQFF.mjs.map +1 -0
- package/dist/{piConfig-Bx26HMb_.d.mts → piConfig-C9rGUqPe.d.mts} +3 -3
- package/dist/{piConfig-Bx26HMb_.d.mts.map → piConfig-C9rGUqPe.d.mts.map} +1 -1
- package/dist/{piConfig-CCBdZXQr.cjs → piConfig-cluCie5i.cjs} +122 -70
- package/dist/piConfig-cluCie5i.cjs.map +1 -0
- package/dist/piConfig.cjs +4 -1
- package/dist/piConfig.d.mts +2 -2
- package/dist/piConfig.mjs +1 -2
- package/dist/piContext.cjs +27 -16
- package/dist/piContext.d.mts +3 -3
- package/dist/piContext.mjs +1 -2
- package/dist/{profiles-DBcYg5nA.mjs → profiles-CHict0x-.mjs} +322 -101
- package/dist/profiles-CHict0x-.mjs.map +1 -0
- package/dist/{profiles-tpplXY4r.cjs → profiles-t2EUj0aB.cjs} +359 -102
- package/dist/profiles-t2EUj0aB.cjs.map +1 -0
- package/dist/profiles.cjs +7 -1
- package/dist/profiles.d.mts +27 -3
- package/dist/profiles.d.mts.map +1 -1
- package/dist/profiles.mjs +1 -2
- package/dist/selectionSwitch.cjs +88 -22
- package/dist/selectionSwitch.cjs.map +1 -1
- package/dist/selectionSwitch.d.mts +40 -18
- package/dist/selectionSwitch.d.mts.map +1 -1
- package/dist/selectionSwitch.mjs +85 -22
- package/dist/selectionSwitch.mjs.map +1 -1
- package/dist/{sessionConfig-DV5xTRRw.mjs → sessionConfig-DFQF618G.mjs} +48 -47
- package/dist/sessionConfig-DFQF618G.mjs.map +1 -0
- package/dist/{sessionConfig-Bf6xHWLd.cjs → sessionConfig-DeP6pplT.cjs} +74 -85
- package/dist/sessionConfig-DeP6pplT.cjs.map +1 -0
- package/dist/sync-BJ8gCP9s.mjs +29 -0
- package/dist/sync-BJ8gCP9s.mjs.map +1 -0
- package/dist/sync-CC_15kkB.d.mts +46 -0
- package/dist/sync-CC_15kkB.d.mts.map +1 -0
- package/dist/sync-Dlxz2msM.cjs +37 -0
- package/dist/sync-Dlxz2msM.cjs.map +1 -0
- package/dist/types.cjs +2 -2
- package/dist/types.d.mts +2 -2
- package/dist/types.mjs +1 -2
- package/llms.txt +1 -1
- package/package.json +16 -16
- package/src/prompts/po-author-config/SKILL.md +4 -4
- package/src/prompts/po-author-config/agents/openai.yaml +1 -1
- package/src/prompts/po-author-config/references/config-contract.md +5 -5
- package/dist/atomicJson-1W0WhuFF.mjs +0 -44
- package/dist/atomicJson-1W0WhuFF.mjs.map +0 -1
- package/dist/atomicJson-Dt2z_DXl.cjs +0 -52
- package/dist/atomicJson-Dt2z_DXl.cjs.map +0 -1
- package/dist/config-CfTb0_9G.cjs +0 -219
- package/dist/config-CfTb0_9G.cjs.map +0 -1
- package/dist/config-D2HbBLzo.d.mts.map +0 -1
- package/dist/config-DoQWSt1V.mjs +0 -162
- package/dist/config-DoQWSt1V.mjs.map +0 -1
- package/dist/config-NSHRd6na.mjs +0 -2
- package/dist/configPolicy-Ce1QKDxa.cjs.map +0 -1
- package/dist/configPolicy-DCQgF5-f.mjs.map +0 -1
- package/dist/configWriter-B7uO8MuN.cjs +0 -150
- package/dist/configWriter-B7uO8MuN.cjs.map +0 -1
- package/dist/configWriter-DUtLgOlD.mjs +0 -130
- package/dist/configWriter-DUtLgOlD.mjs.map +0 -1
- package/dist/domains-BroCVHrS.mjs.map +0 -1
- package/dist/domains-DGCb7uMC.cjs.map +0 -1
- package/dist/harnessStore-CJSxdSkV.cjs.map +0 -1
- package/dist/harnessStore-CltwLB7M.mjs.map +0 -1
- package/dist/index-78zvoS9s.d.mts +0 -35
- package/dist/index-78zvoS9s.d.mts.map +0 -1
- package/dist/index-BT29GZx5.d.mts.map +0 -1
- package/dist/index-C6GaYjq-.d.mts +0 -6
- package/dist/index-C6GaYjq-.d.mts.map +0 -1
- package/dist/index-CEUc7m16.d.mts.map +0 -1
- package/dist/index-CRcoVYXz.d.mts +0 -39
- package/dist/index-CRcoVYXz.d.mts.map +0 -1
- package/dist/index-CVlciCJF.d.mts +0 -40
- package/dist/index-CVlciCJF.d.mts.map +0 -1
- package/dist/index-Ch7ptOkW.d.mts.map +0 -1
- package/dist/index-CkDDvVQt.d.mts.map +0 -1
- package/dist/index-Cvdt-Y-i.d.mts +0 -66
- package/dist/index-Cvdt-Y-i.d.mts.map +0 -1
- package/dist/index-DNk4q0Qm.d.mts.map +0 -1
- package/dist/index-DdH0w56b.d.mts +0 -116
- package/dist/index-DdH0w56b.d.mts.map +0 -1
- package/dist/init-Cd3Ki6Ub.cjs.map +0 -1
- package/dist/init-DVzhiCUE.mjs.map +0 -1
- package/dist/layeredConfig-fukqN2EA.mjs +0 -67
- package/dist/layeredConfig-fukqN2EA.mjs.map +0 -1
- package/dist/layeredConfig-ol0274TN.cjs +0 -94
- package/dist/layeredConfig-ol0274TN.cjs.map +0 -1
- package/dist/majorModes-D1Itd8SN.mjs.map +0 -1
- package/dist/majorModes-DnNSH9ZK.cjs.map +0 -1
- package/dist/piConfig-CCBdZXQr.cjs.map +0 -1
- package/dist/piConfig-qGyCbcVj.mjs.map +0 -1
- package/dist/profiles-DBcYg5nA.mjs.map +0 -1
- package/dist/profiles-tpplXY4r.cjs.map +0 -1
- package/dist/sessionConfig-Bf6xHWLd.cjs.map +0 -1
- package/dist/sessionConfig-DV5xTRRw.mjs.map +0 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"agentPluginMcp.mjs","names":[],"sources":["../src/services/agentPluginMcp/index.ts"],"sourcesContent":["import { createHash, randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport { validateHeaderName, validateHeaderValue } from 'node:http';\nimport { isIP } from 'node:net';\nimport path from 'node:path';\n\nimport { AGENT_PLUGIN_MCP_SCHEMA_URL, type DoomMcpAgentPluginProjectionSource } from '@agimon-ai/po-core/mcpProjection';\n\nconst PRIVATE_FILE_MODE = 0o600;\nconst PRIVATE_DIRECTORY_MODE = 0o700;\nconst RESERVED_ENVIRONMENT_KEYS = new Set(['PLUGIN_ROOT', 'PLUGIN_DATA']);\nconst PROXY_SERVER_ALIASES = new Set(['mcp-proxy', 'agiflow-proxy']);\n\ntype JsonObject = Record<string, unknown>;\n\nexport interface AgentPluginMcpConfigSource {\n path: string;\n format: 'internal';\n cacheKey: string;\n}\n\nexport interface NormalizedAgentPluginMcpSource {\n /** Owner-only, content-addressed layer that bypasses Claude env interpolation. */\n configSource?: AgentPluginMcpConfigSource;\n /** Claude-compatible definitions for an external merged config. */\n claudeConfig: { mcpServers: Record<string, JsonObject> };\n serverNames: string[];\n droppedServers: string[];\n diagnostics: string[];\n}\n\nexport interface NormalizeAgentPluginMcpOptions {\n stagingDirectory: string;\n /** Empty and absent lists both mean keep every server. */\n allowedServers?: readonly string[];\n /** Doom strips nested wrappers; external-only callers may opt out. */\n stripProxyWrappers?: boolean;\n}\n\ninterface NormalizedServer {\n internal: JsonObject;\n claude: JsonObject;\n}\n\nfunction isObject(value: unknown): value is JsonObject {\n return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction onlyKeys(value: JsonObject, allowed: readonly string[], label: string): void {\n const unexpected = Object.keys(value).find((key) => !allowed.includes(key));\n if (unexpected) throw new Error(`${label} contains unsupported field \"${unexpected}\"`);\n}\n\nfunction nonEmptyString(value: unknown, label: string): string {\n if (typeof value !== 'string' || value.length === 0) throw new Error(`${label} must be a non-empty string`);\n return value;\n}\n\nfunction optionalStringArray(value: unknown, label: string): string[] | undefined {\n if (value === undefined) return undefined;\n if (!Array.isArray(value)) throw new Error(`${label} must be an array of strings`);\n return value.map((item, index) => {\n if (typeof item !== 'string') throw new Error(`${label}[${index}] must be a string`);\n return item;\n });\n}\n\nfunction optionalStringRecord(value: unknown, label: string): Record<string, string> | undefined {\n if (value === undefined) return undefined;\n if (!isObject(value)) throw new Error(`${label} must be an object of string values`);\n return Object.fromEntries(\n Object.entries(value).map(([key, item]) => {\n if (typeof item !== 'string') throw new Error(`${label}.${key} must be a string`);\n return [key, item];\n }),\n );\n}\n\nfunction expandPluginPlaceholders(value: string, pluginRoot: string, pluginDataDirectory: string): string {\n // The portable contract is a single, non-recursive replacement pass. An\n // unrecognised placeholder remains literal and mcp-proxy must not reinterpret it.\n return value.replace(/\\$\\{PLUGIN_(ROOT|DATA)\\}/gu, (placeholder) =>\n placeholder === '${PLUGIN_ROOT}' ? pluginRoot : pluginDataDirectory,\n );\n}\n\nfunction isInside(root: string, candidate: string): boolean {\n const relative = path.relative(root, candidate);\n return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));\n}\n\nfunction realContainedPath(root: string, candidate: string, label: string): string {\n let realCandidate: string;\n try {\n realCandidate = fs.realpathSync(candidate);\n } catch {\n throw new Error(`${label} does not exist`);\n }\n if (!isInside(root, realCandidate)) throw new Error(`${label} escapes its allowed plugin directory`);\n return realCandidate;\n}\n\nfunction normalizeCommand(command: string, pluginRoot: string): string {\n if (command.startsWith('./')) {\n const resolved = realContainedPath(pluginRoot, path.resolve(pluginRoot, command), 'command');\n if (!fs.statSync(resolved).isFile()) throw new Error('command must resolve to a regular file');\n try {\n fs.accessSync(resolved, fs.constants.X_OK);\n } catch {\n throw new Error('command must resolve to an executable file');\n }\n return resolved;\n }\n if (command === '.' || command === '..' || /[\\s/\\\\]/u.test(command)) {\n throw new Error('command must be a bare executable name or a ./ path inside the plugin');\n }\n return command;\n}\n\nfunction normalizeWorkingDirectory(declared: unknown, pluginRoot: string, pluginDataDirectory: string): string {\n if (declared === undefined) return pluginRoot;\n const cwd = nonEmptyString(declared, 'cwd');\n let base: string;\n let expanded: string;\n if (cwd.startsWith('./')) {\n base = pluginRoot;\n expanded = path.resolve(pluginRoot, cwd);\n } else if (cwd === '${PLUGIN_ROOT}' || cwd.startsWith('${PLUGIN_ROOT}/')) {\n base = pluginRoot;\n expanded = expandPluginPlaceholders(cwd, pluginRoot, pluginDataDirectory);\n } else if (cwd === '${PLUGIN_DATA}' || cwd.startsWith('${PLUGIN_DATA}/')) {\n base = pluginDataDirectory;\n expanded = expandPluginPlaceholders(cwd, pluginRoot, pluginDataDirectory);\n } else {\n throw new Error('cwd must start with ./, ${PLUGIN_ROOT}, or ${PLUGIN_DATA}');\n }\n const resolved = realContainedPath(base, path.resolve(expanded), 'cwd');\n if (!fs.statSync(resolved).isDirectory()) throw new Error('cwd must resolve to a directory');\n return resolved;\n}\n\nfunction normalizeEnvironment(value: unknown, pluginRoot: string, pluginDataDirectory: string): Record<string, string> {\n const declared = optionalStringRecord(value, 'env') ?? {};\n for (const key of Object.keys(declared)) {\n const reservedKey = process.platform === 'win32' ? key.toUpperCase() : key;\n if (RESERVED_ENVIRONMENT_KEYS.has(reservedKey)) {\n throw new Error(`env key \"${key}\" is reserved by Agent Plugins`);\n }\n }\n return {\n ...Object.fromEntries(\n Object.entries(declared).map(([key, item]) => [\n key,\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n ]),\n ),\n PLUGIN_ROOT: pluginRoot,\n PLUGIN_DATA: pluginDataDirectory,\n };\n}\n\nfunction isLoopbackHost(hostname: string): boolean {\n const bareHostname = hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname;\n if (bareHostname.toLowerCase() === 'localhost') return true;\n const family = isIP(bareHostname);\n if (family === 4) return bareHostname.split('.')[0] === '127';\n return family === 6 && bareHostname === '::1';\n}\n\nfunction normalizeUrl(value: unknown): string {\n const raw = nonEmptyString(value, 'url');\n let parsed: URL;\n try {\n parsed = new URL(raw);\n } catch {\n throw new Error('url must be an absolute HTTP(S) URL');\n }\n if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {\n throw new Error('url must use http or https');\n }\n if (parsed.username || parsed.password) throw new Error('url must not contain user information');\n if (parsed.hash) throw new Error('url must not contain a fragment');\n if (parsed.protocol === 'http:' && !isLoopbackHost(parsed.hostname)) {\n throw new Error('non-loopback MCP URLs must use https');\n }\n return raw;\n}\n\nfunction normalizeHeaders(value: unknown): Record<string, string> | undefined {\n const headers = optionalStringRecord(value, 'headers');\n if (!headers) return undefined;\n const seen = new Set<string>();\n for (const [name, item] of Object.entries(headers)) {\n const canonical = name.toLowerCase();\n if (seen.has(canonical)) throw new Error(`headers contain duplicate name \"${name}\"`);\n seen.add(canonical);\n try {\n validateHeaderName(name);\n validateHeaderValue(name, item);\n } catch {\n throw new Error(`header \"${name}\" is invalid`);\n }\n }\n return headers;\n}\n\nfunction normalizeServer(\n raw: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n name: string,\n): NormalizedServer {\n if (!isObject(raw)) throw new Error('definition must be an object');\n const type = nonEmptyString(raw.type, 'type');\n if (type === 'stdio') {\n onlyKeys(raw, ['type', 'command', 'args', 'env', 'cwd'], `server \"${name}\"`);\n const command = normalizeCommand(nonEmptyString(raw.command, 'command'), pluginRoot);\n const args = optionalStringArray(raw.args, 'args')?.map((item) =>\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n );\n const env = normalizeEnvironment(raw.env, pluginRoot, pluginDataDirectory);\n const cwd = normalizeWorkingDirectory(raw.cwd, pluginRoot, pluginDataDirectory);\n const config = { command, ...(args ? { args } : {}), env, cwd };\n return {\n internal: { name, transport: 'stdio', config },\n claude: { type: 'stdio', ...config },\n };\n }\n\n if (type === 'streamable-http' || type === 'sse') {\n onlyKeys(raw, ['type', 'url', 'headers'], `server \"${name}\"`);\n const url = normalizeUrl(raw.url);\n const headers = normalizeHeaders(raw.headers);\n const transport = type === 'streamable-http' ? 'http' : 'sse';\n const config = { url, ...(headers ? { headers } : {}) };\n return {\n internal: { name, transport, config },\n claude: { type: transport, ...config },\n };\n }\n\n throw new Error(`unsupported transport type \"${type}\"`);\n}\n\nfunction stagedInternalPath(\n source: DoomMcpAgentPluginProjectionSource,\n contents: string,\n stagingDirectory: string,\n): string {\n const digest = createHash('sha256')\n .update(source.sourceId)\n .update('\\0')\n .update(source.contentDigest)\n .update('\\0')\n .update(contents)\n .digest('hex')\n .slice(0, 20);\n return path.join(stagingDirectory, `agent-plugin-mcp-${digest}.internal.json`);\n}\n\nfunction writeStagedInternalConfig(target: string, contents: string, stagingDirectory: string): void {\n fs.mkdirSync(stagingDirectory, { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n fs.chmodSync(stagingDirectory, PRIVATE_DIRECTORY_MODE);\n const temporaryPath = `${target}.${process.pid}-${randomUUID()}.tmp`;\n try {\n fs.writeFileSync(temporaryPath, contents, { flag: 'wx', mode: PRIVATE_FILE_MODE });\n try {\n fs.renameSync(temporaryPath, target);\n } catch (error) {\n const code = (error as NodeJS.ErrnoException).code;\n if (code !== 'EEXIST' && code !== 'EPERM') throw error;\n const stat = fs.lstatSync(target);\n if (stat.isSymbolicLink() || !stat.isFile() || fs.readFileSync(target, 'utf8') !== contents) {\n throw new Error('content-addressed staging path is occupied by different content');\n }\n }\n fs.chmodSync(target, PRIVATE_FILE_MODE);\n } finally {\n fs.rmSync(temporaryPath, { force: true });\n }\n}\n\nfunction emptyResult(diagnostic: string): NormalizedAgentPluginMcpSource {\n return {\n claudeConfig: { mcpServers: {} },\n serverNames: [],\n droppedServers: [],\n diagnostics: [diagnostic],\n };\n}\n\n/**\n * Validates one Agent Plugins v1 `mcp.json` and stages a native mcp-proxy layer.\n *\n * Server validation is isolated: one malformed server is diagnosed and skipped.\n * Document/schema, source identity, or plugin-boundary failures reject the whole\n * source. Only the two portable plugin placeholders are expanded; the staged\n * layer is tagged `internal`, so legacy `${ENV}` interpolation cannot run again.\n */\nexport function normalizeAgentPluginMcpSource(\n source: DoomMcpAgentPluginProjectionSource,\n options: NormalizeAgentPluginMcpOptions,\n): NormalizedAgentPluginMcpSource {\n const label = `Agent Plugin MCP source \"${source.sourceId}\"`;\n try {\n if (source.mcpSchemaUrl !== AGENT_PLUGIN_MCP_SCHEMA_URL) {\n throw new Error(`unsupported schema \"${String(source.mcpSchemaUrl)}\"`);\n }\n if (!path.isAbsolute(source.pluginRoot) || !path.isAbsolute(source.pluginDataDirectory)) {\n throw new Error('pluginRoot and pluginDataDirectory must be absolute');\n }\n const pluginRoot = fs.realpathSync(source.pluginRoot);\n try {\n const dataStat = fs.lstatSync(source.pluginDataDirectory);\n if (dataStat.isSymbolicLink() || !dataStat.isDirectory()) {\n throw new Error('pluginDataDirectory must be a real directory');\n }\n } catch (error) {\n if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw error;\n fs.mkdirSync(source.pluginDataDirectory, { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n }\n fs.chmodSync(source.pluginDataDirectory, PRIVATE_DIRECTORY_MODE);\n fs.accessSync(source.pluginDataDirectory, fs.constants.W_OK);\n const pluginDataDirectory = fs.realpathSync(source.pluginDataDirectory);\n const configPath = realContainedPath(pluginRoot, source.configPath, 'mcp.json');\n if (path.dirname(configPath) !== pluginRoot || path.basename(configPath) !== 'mcp.json') {\n throw new Error('portable plugin config must be root mcp.json');\n }\n\n const bytes = fs.readFileSync(configPath);\n const digest = createHash('sha256').update(bytes).digest('hex');\n if (digest !== source.contentDigest) throw new Error('content digest does not match the projection');\n const parsed: unknown = JSON.parse(bytes.toString('utf8'));\n if (!isObject(parsed)) throw new Error('document must be an object');\n onlyKeys(parsed, ['$schema', 'mcpServers'], label);\n if (parsed.$schema !== source.mcpSchemaUrl) throw new Error('$schema does not match the projected schema');\n if (!isObject(parsed.mcpServers)) throw new Error('mcpServers must be an object');\n\n const allowed = options.allowedServers;\n const keepAll = !allowed || allowed.length === 0;\n const stripProxyWrappers = options.stripProxyWrappers ?? true;\n const internalServers = Object.create(null) as Record<string, JsonObject>;\n const claudeServers = Object.create(null) as Record<string, JsonObject>;\n const droppedServers: string[] = [];\n const diagnostics: string[] = [];\n\n for (const [name, rawServer] of Object.entries(parsed.mcpServers)) {\n if (!name) {\n diagnostics.push(`${label} contains an empty server name; that entry was skipped.`);\n continue;\n }\n if ((!keepAll && !allowed.includes(name)) || (stripProxyWrappers && PROXY_SERVER_ALIASES.has(name))) {\n droppedServers.push(name);\n continue;\n }\n try {\n const normalized = normalizeServer(rawServer, pluginRoot, pluginDataDirectory, name);\n internalServers[name] = normalized.internal;\n claudeServers[name] = normalized.claude;\n } catch (error) {\n droppedServers.push(name);\n diagnostics.push(\n `${label} skipped server \"${name}\": ${error instanceof Error ? error.message : String(error)}`,\n );\n }\n }\n\n const internalConfig = { mcpServers: internalServers };\n const contents = `${JSON.stringify(internalConfig, null, 2)}\\n`;\n const target = stagedInternalPath(source, contents, options.stagingDirectory);\n writeStagedInternalConfig(target, contents, options.stagingDirectory);\n const cacheKey = createHash('sha256')\n .update('agent-plugin-v1\\0')\n .update(source.sourceId)\n .update('\\0')\n .update(source.contentDigest)\n .update('\\0')\n .update(configPath)\n .update('\\0')\n .update(contents)\n .digest('hex');\n\n return {\n configSource: { path: target, format: 'internal', cacheKey },\n claudeConfig: { mcpServers: claudeServers },\n serverNames: Object.keys(internalServers),\n droppedServers,\n diagnostics,\n };\n } catch (error) {\n return emptyResult(`${label} was disabled: ${error instanceof Error ? error.message : String(error)}`);\n }\n}\n"],"mappings":";;;;;;;AAQA,MAAM,oBAAoB;AAC1B,MAAM,yBAAyB;AAC/B,MAAM,4CAA4B,IAAI,IAAI,CAAC,eAAe,aAAa,CAAC;AACxE,MAAM,uCAAuB,IAAI,IAAI,CAAC,aAAa,eAAe,CAAC;AAiCnE,SAAS,SAAS,OAAqC;CACrD,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,SAAS,OAAmB,SAA4B,OAAqB;CACpF,MAAM,aAAa,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,SAAS,GAAG,CAAC;CAC1E,IAAI,YAAY,MAAM,IAAI,MAAM,GAAG,MAAM,+BAA+B,WAAW,EAAE;AACvF;AAEA,SAAS,eAAe,OAAgB,OAAuB;CAC7D,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CAC1G,OAAO;AACT;AAEA,SAAS,oBAAoB,OAAgB,OAAqC;CAChF,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,6BAA6B;CACjF,OAAO,MAAM,KAAK,MAAM,UAAU;EAChC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,mBAAmB;EACnF,OAAO;CACT,CAAC;AACH;AAEA,SAAS,qBAAqB,OAAgB,OAAmD;CAC/F,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,oCAAoC;CACnF,OAAO,OAAO,YACZ,OAAO,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU;EACzC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,kBAAkB;EAChF,OAAO,CAAC,KAAK,IAAI;CACnB,CAAC,CACH;AACF;AAEA,SAAS,yBAAyB,OAAe,YAAoB,qBAAqC;CAGxG,OAAO,MAAM,QAAQ,+BAA+B,gBAClD,gBAAgB,mBAAmB,aAAa,mBAClD;AACF;AAEA,SAAS,SAAS,MAAc,WAA4B;CAC1D,MAAM,WAAW,KAAK,SAAS,MAAM,SAAS;CAC9C,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,KAAK,KAAK,KAAK,KAAK,aAAa,QAAQ,CAAC,KAAK,WAAW,QAAQ;AACpH;AAEA,SAAS,kBAAkB,MAAc,WAAmB,OAAuB;CACjF,IAAI;CACJ,IAAI;EACF,gBAAgB,GAAG,aAAa,SAAS;CAC3C,QAAQ;EACN,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB;CAC3C;CACA,IAAI,CAAC,SAAS,MAAM,aAAa,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,sCAAsC;CACnG,OAAO;AACT;AAEA,SAAS,iBAAiB,SAAiB,YAA4B;CACrE,IAAI,QAAQ,WAAW,IAAI,GAAG;EAC5B,MAAM,WAAW,kBAAkB,YAAY,KAAK,QAAQ,YAAY,OAAO,GAAG,SAAS;EAC3F,IAAI,CAAC,GAAG,SAAS,QAAQ,CAAC,CAAC,OAAO,GAAG,MAAM,IAAI,MAAM,wCAAwC;EAC7F,IAAI;GACF,GAAG,WAAW,UAAU,GAAG,UAAU,IAAI;EAC3C,QAAQ;GACN,MAAM,IAAI,MAAM,4CAA4C;EAC9D;EACA,OAAO;CACT;CACA,IAAI,YAAY,OAAO,YAAY,QAAQ,WAAW,KAAK,OAAO,GAChE,MAAM,IAAI,MAAM,uEAAuE;CAEzF,OAAO;AACT;AAEA,SAAS,0BAA0B,UAAmB,YAAoB,qBAAqC;CAC7G,IAAI,aAAa,KAAA,GAAW,OAAO;CACnC,MAAM,MAAM,eAAe,UAAU,KAAK;CAC1C,IAAI;CACJ,IAAI;CACJ,IAAI,IAAI,WAAW,IAAI,GAAG;EACxB,OAAO;EACP,WAAW,KAAK,QAAQ,YAAY,GAAG;CACzC,OAAO,IAAI,QAAQ,oBAAoB,IAAI,WAAW,iBAAiB,GAAG;EACxE,OAAO;EACP,WAAW,yBAAyB,KAAK,YAAY,mBAAmB;CAC1E,OAAO,IAAI,QAAQ,oBAAoB,IAAI,WAAW,iBAAiB,GAAG;EACxE,OAAO;EACP,WAAW,yBAAyB,KAAK,YAAY,mBAAmB;CAC1E,OACE,MAAM,IAAI,MAAM,2DAA2D;CAE7E,MAAM,WAAW,kBAAkB,MAAM,KAAK,QAAQ,QAAQ,GAAG,KAAK;CACtE,IAAI,CAAC,GAAG,SAAS,QAAQ,CAAC,CAAC,YAAY,GAAG,MAAM,IAAI,MAAM,iCAAiC;CAC3F,OAAO;AACT;AAEA,SAAS,qBAAqB,OAAgB,YAAoB,qBAAqD;CACrH,MAAM,WAAW,qBAAqB,OAAO,KAAK,KAAK,CAAC;CACxD,KAAK,MAAM,OAAO,OAAO,KAAK,QAAQ,GAAG;EACvC,MAAM,cAAc,QAAQ,aAAa,UAAU,IAAI,YAAY,IAAI;EACvE,IAAI,0BAA0B,IAAI,WAAW,GAC3C,MAAM,IAAI,MAAM,YAAY,IAAI,+BAA+B;CAEnE;CACA,OAAO;EACL,GAAG,OAAO,YACR,OAAO,QAAQ,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU,CAC5C,KACA,yBAAyB,MAAM,YAAY,mBAAmB,CAChE,CAAC,CACH;EACA,aAAa;EACb,aAAa;CACf;AACF;AAEA,SAAS,eAAe,UAA2B;CACjD,MAAM,eAAe,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG,IAAI,SAAS,MAAM,GAAG,EAAE,IAAI;CAClG,IAAI,aAAa,YAAY,MAAM,aAAa,OAAO;CACvD,MAAM,SAAS,KAAK,YAAY;CAChC,IAAI,WAAW,GAAG,OAAO,aAAa,MAAM,GAAG,CAAC,CAAC,OAAO;CACxD,OAAO,WAAW,KAAK,iBAAiB;AAC1C;AAEA,SAAS,aAAa,OAAwB;CAC5C,MAAM,MAAM,eAAe,OAAO,KAAK;CACvC,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN,MAAM,IAAI,MAAM,qCAAqC;CACvD;CACA,IAAI,OAAO,aAAa,WAAW,OAAO,aAAa,UACrD,MAAM,IAAI,MAAM,4BAA4B;CAE9C,IAAI,OAAO,YAAY,OAAO,UAAU,MAAM,IAAI,MAAM,uCAAuC;CAC/F,IAAI,OAAO,MAAM,MAAM,IAAI,MAAM,iCAAiC;CAClE,IAAI,OAAO,aAAa,WAAW,CAAC,eAAe,OAAO,QAAQ,GAChE,MAAM,IAAI,MAAM,sCAAsC;CAExD,OAAO;AACT;AAEA,SAAS,iBAAiB,OAAoD;CAC5E,MAAM,UAAU,qBAAqB,OAAO,SAAS;CACrD,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,OAAO,GAAG;EAClD,MAAM,YAAY,KAAK,YAAY;EACnC,IAAI,KAAK,IAAI,SAAS,GAAG,MAAM,IAAI,MAAM,mCAAmC,KAAK,EAAE;EACnF,KAAK,IAAI,SAAS;EAClB,IAAI;GACF,mBAAmB,IAAI;GACvB,oBAAoB,MAAM,IAAI;EAChC,QAAQ;GACN,MAAM,IAAI,MAAM,WAAW,KAAK,aAAa;EAC/C;CACF;CACA,OAAO;AACT;AAEA,SAAS,gBACP,KACA,YACA,qBACA,MACkB;CAClB,IAAI,CAAC,SAAS,GAAG,GAAG,MAAM,IAAI,MAAM,8BAA8B;CAClE,MAAM,OAAO,eAAe,IAAI,MAAM,MAAM;CAC5C,IAAI,SAAS,SAAS;EACpB,SAAS,KAAK;GAAC;GAAQ;GAAW;GAAQ;GAAO;EAAK,GAAG,WAAW,KAAK,EAAE;EAC3E,MAAM,UAAU,iBAAiB,eAAe,IAAI,SAAS,SAAS,GAAG,UAAU;EACnF,MAAM,OAAO,oBAAoB,IAAI,MAAM,MAAM,CAAC,EAAE,KAAK,SACvD,yBAAyB,MAAM,YAAY,mBAAmB,CAChE;EACA,MAAM,MAAM,qBAAqB,IAAI,KAAK,YAAY,mBAAmB;EACzE,MAAM,MAAM,0BAA0B,IAAI,KAAK,YAAY,mBAAmB;EAC9E,MAAM,SAAS;GAAE;GAAS,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;GAAI;GAAK;EAAI;EAC9D,OAAO;GACL,UAAU;IAAE;IAAM,WAAW;IAAS;GAAO;GAC7C,QAAQ;IAAE,MAAM;IAAS,GAAG;GAAO;EACrC;CACF;CAEA,IAAI,SAAS,qBAAqB,SAAS,OAAO;EAChD,SAAS,KAAK;GAAC;GAAQ;GAAO;EAAS,GAAG,WAAW,KAAK,EAAE;EAC5D,MAAM,MAAM,aAAa,IAAI,GAAG;EAChC,MAAM,UAAU,iBAAiB,IAAI,OAAO;EAC5C,MAAM,YAAY,SAAS,oBAAoB,SAAS;EACxD,MAAM,SAAS;GAAE;GAAK,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;EAAG;EACtD,OAAO;GACL,UAAU;IAAE;IAAM;IAAW;GAAO;GACpC,QAAQ;IAAE,MAAM;IAAW,GAAG;GAAO;EACvC;CACF;CAEA,MAAM,IAAI,MAAM,+BAA+B,KAAK,EAAE;AACxD;AAEA,SAAS,mBACP,QACA,UACA,kBACQ;CACR,MAAM,SAAS,WAAW,QAAQ,CAAC,CAChC,OAAO,OAAO,QAAQ,CAAC,CACvB,OAAO,IAAI,CAAC,CACZ,OAAO,OAAO,aAAa,CAAC,CAC5B,OAAO,IAAI,CAAC,CACZ,OAAO,QAAQ,CAAC,CAChB,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EAAE;CACd,OAAO,KAAK,KAAK,kBAAkB,oBAAoB,OAAO,eAAe;AAC/E;AAEA,SAAS,0BAA0B,QAAgB,UAAkB,kBAAgC;CACnG,GAAG,UAAU,kBAAkB;EAAE,MAAM;EAAwB,WAAW;CAAK,CAAC;CAChF,GAAG,UAAU,kBAAkB,sBAAsB;CACrD,MAAM,gBAAgB,GAAG,OAAO,GAAG,QAAQ,IAAI,GAAG,WAAW,EAAE;CAC/D,IAAI;EACF,GAAG,cAAc,eAAe,UAAU;GAAE,MAAM;GAAM,MAAM;EAAkB,CAAC;EACjF,IAAI;GACF,GAAG,WAAW,eAAe,MAAM;EACrC,SAAS,OAAO;GACd,MAAM,OAAQ,MAAgC;GAC9C,IAAI,SAAS,YAAY,SAAS,SAAS,MAAM;GACjD,MAAM,OAAO,GAAG,UAAU,MAAM;GAChC,IAAI,KAAK,eAAe,KAAK,CAAC,KAAK,OAAO,KAAK,GAAG,aAAa,QAAQ,MAAM,MAAM,UACjF,MAAM,IAAI,MAAM,iEAAiE;EAErF;EACA,GAAG,UAAU,QAAQ,iBAAiB;CACxC,UAAU;EACR,GAAG,OAAO,eAAe,EAAE,OAAO,KAAK,CAAC;CAC1C;AACF;AAEA,SAAS,YAAY,YAAoD;CACvE,OAAO;EACL,cAAc,EAAE,YAAY,CAAC,EAAE;EAC/B,aAAa,CAAC;EACd,gBAAgB,CAAC;EACjB,aAAa,CAAC,UAAU;CAC1B;AACF;;;;;;;;;AAUA,SAAgB,8BACd,QACA,SACgC;CAChC,MAAM,QAAQ,4BAA4B,OAAO,SAAS;CAC1D,IAAI;EACF,IAAI,OAAO,iBAAiB,6BAC1B,MAAM,IAAI,MAAM,uBAAuB,OAAO,OAAO,YAAY,EAAE,EAAE;EAEvE,IAAI,CAAC,KAAK,WAAW,OAAO,UAAU,KAAK,CAAC,KAAK,WAAW,OAAO,mBAAmB,GACpF,MAAM,IAAI,MAAM,qDAAqD;EAEvE,MAAM,aAAa,GAAG,aAAa,OAAO,UAAU;EACpD,IAAI;GACF,MAAM,WAAW,GAAG,UAAU,OAAO,mBAAmB;GACxD,IAAI,SAAS,eAAe,KAAK,CAAC,SAAS,YAAY,GACrD,MAAM,IAAI,MAAM,8CAA8C;EAElE,SAAS,OAAO;GACd,IAAK,MAAgC,SAAS,UAAU,MAAM;GAC9D,GAAG,UAAU,OAAO,qBAAqB;IAAE,MAAM;IAAwB,WAAW;GAAK,CAAC;EAC5F;EACA,GAAG,UAAU,OAAO,qBAAqB,sBAAsB;EAC/D,GAAG,WAAW,OAAO,qBAAqB,GAAG,UAAU,IAAI;EAC3D,MAAM,sBAAsB,GAAG,aAAa,OAAO,mBAAmB;EACtE,MAAM,aAAa,kBAAkB,YAAY,OAAO,YAAY,UAAU;EAC9E,IAAI,KAAK,QAAQ,UAAU,MAAM,cAAc,KAAK,SAAS,UAAU,MAAM,YAC3E,MAAM,IAAI,MAAM,8CAA8C;EAGhE,MAAM,QAAQ,GAAG,aAAa,UAAU;EAExC,IADe,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAChD,MAAM,OAAO,eAAe,MAAM,IAAI,MAAM,8CAA8C;EACnG,MAAM,SAAkB,KAAK,MAAM,MAAM,SAAS,MAAM,CAAC;EACzD,IAAI,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,4BAA4B;EACnE,SAAS,QAAQ,CAAC,WAAW,YAAY,GAAG,KAAK;EACjD,IAAI,OAAO,YAAY,OAAO,cAAc,MAAM,IAAI,MAAM,6CAA6C;EACzG,IAAI,CAAC,SAAS,OAAO,UAAU,GAAG,MAAM,IAAI,MAAM,8BAA8B;EAEhF,MAAM,UAAU,QAAQ;EACxB,MAAM,UAAU,CAAC,WAAW,QAAQ,WAAW;EAC/C,MAAM,qBAAqB,QAAQ,sBAAsB;EACzD,MAAM,kBAAkB,OAAO,OAAO,IAAI;EAC1C,MAAM,gBAAgB,OAAO,OAAO,IAAI;EACxC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAE/B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,OAAO,UAAU,GAAG;GACjE,IAAI,CAAC,MAAM;IACT,YAAY,KAAK,GAAG,MAAM,wDAAwD;IAClF;GACF;GACA,IAAK,CAAC,WAAW,CAAC,QAAQ,SAAS,IAAI,KAAO,sBAAsB,qBAAqB,IAAI,IAAI,GAAI;IACnG,eAAe,KAAK,IAAI;IACxB;GACF;GACA,IAAI;IACF,MAAM,aAAa,gBAAgB,WAAW,YAAY,qBAAqB,IAAI;IACnF,gBAAgB,QAAQ,WAAW;IACnC,cAAc,QAAQ,WAAW;GACnC,SAAS,OAAO;IACd,eAAe,KAAK,IAAI;IACxB,YAAY,KACV,GAAG,MAAM,mBAAmB,KAAK,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAC7F;GACF;EACF;EAGA,MAAM,WAAW,GAAG,KAAK,UAAU,EADV,YAAY,gBACW,GAAG,MAAM,CAAC,EAAE;EAC5D,MAAM,SAAS,mBAAmB,QAAQ,UAAU,QAAQ,gBAAgB;EAC5E,0BAA0B,QAAQ,UAAU,QAAQ,gBAAgB;EAYpE,OAAO;GACL,cAAc;IAAE,MAAM;IAAQ,QAAQ;IAAY,UAZnC,WAAW,QAAQ,CAAC,CAClC,OAAO,mBAAmB,CAAC,CAC3B,OAAO,OAAO,QAAQ,CAAC,CACvB,OAAO,IAAI,CAAC,CACZ,OAAO,OAAO,aAAa,CAAC,CAC5B,OAAO,IAAI,CAAC,CACZ,OAAO,UAAU,CAAC,CAClB,OAAO,IAAI,CAAC,CACZ,OAAO,QAAQ,CAAC,CAChB,OAAO,KAGiD;GAAE;GAC3D,cAAc,EAAE,YAAY,cAAc;GAC1C,aAAa,OAAO,KAAK,eAAe;GACxC;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO,YAAY,GAAG,MAAM,iBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;CACvG;AACF"}
|
|
1
|
+
{"version":3,"file":"agentPluginMcp.mjs","names":["realContainedPath","normalizeCommand","normalizeWorkingDirectory","normalizeServer","writeStagedInternalConfig"],"sources":["../src/services/agentPluginMcp/normalize.ts","../src/services/agentPluginMcp/sync.ts","../src/services/agentPluginMcp/index.ts"],"sourcesContent":["/** Pure Agent Plugin MCP normalisation shared by the async API and the deprecated Node-only sync shim. */\nimport { createHash } from 'node:crypto';\nimport path from 'node:path';\n\nimport { AGENT_PLUGIN_MCP_SCHEMA_URL, type PoMcpAgentPluginProjectionSource } from '@agimon-ai/po-core/mcpProjection';\n\n/** Same token grammar as node:http `validateHeaderName` (RFC 9110 tchar). */\nconst HTTP_TOKEN = /^[\\^_`a-zA-Z\\-0-9!#$%&'*+.|~]+$/u;\n/** Same rejected characters as node:http `validateHeaderValue`. */\nconst INVALID_HEADER_VALUE_CHARACTER = /[^\\t\\x20-\\x7e\\x80-\\xff]/u;\nconst IPV4_OCTET = '(?:25[0-5]|2[0-4]\\\\d|1\\\\d\\\\d|[1-9]?\\\\d)';\nconst IPV4_ADDRESS = new RegExp(`^${IPV4_OCTET}(?:\\\\.${IPV4_OCTET}){3}$`, 'u');\n\nfunction isIPv4(value: string): boolean {\n return IPV4_ADDRESS.test(value);\n}\n\nexport const PRIVATE_FILE_MODE = 0o600;\nexport const PRIVATE_DIRECTORY_MODE = 0o700;\nexport const RESERVED_ENVIRONMENT_KEYS = new Set(['PLUGIN_ROOT', 'PLUGIN_DATA']);\nexport const PROXY_SERVER_ALIASES = new Set(['mcp-proxy', 'agiflow-proxy']);\n\nexport type JsonObject = Record<string, unknown>;\n\nexport interface AgentPluginMcpConfigSource {\n path: string;\n format: 'internal';\n cacheKey: string;\n}\n\nexport interface NormalizedAgentPluginMcpSource {\n /** Owner-only, content-addressed layer that bypasses Claude env interpolation. */\n configSource?: AgentPluginMcpConfigSource;\n /** Claude-compatible definitions for an external merged config. */\n claudeConfig: { mcpServers: Record<string, JsonObject> };\n serverNames: string[];\n droppedServers: string[];\n diagnostics: string[];\n}\n\nexport interface NormalizeAgentPluginMcpOptions {\n stagingDirectory: string;\n /** Empty and absent lists both mean keep every server. */\n allowedServers?: readonly string[];\n /** Po strips nested wrappers; external-only callers may opt out. */\n stripProxyWrappers?: boolean;\n}\n\nexport interface NormalizedServer {\n internal: JsonObject;\n claude: JsonObject;\n}\n\nexport function isObject(value: unknown): value is JsonObject {\n return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nexport function onlyKeys(value: JsonObject, allowed: readonly string[], label: string): void {\n const unexpected = Object.keys(value).find((key) => !allowed.includes(key));\n if (unexpected) throw new Error(`${label} contains unsupported field \"${unexpected}\"`);\n}\n\nexport function nonEmptyString(value: unknown, label: string): string {\n if (typeof value !== 'string' || value.length === 0) throw new Error(`${label} must be a non-empty string`);\n return value;\n}\n\nexport function optionalStringArray(value: unknown, label: string): string[] | undefined {\n if (value === undefined) return undefined;\n if (!Array.isArray(value)) throw new Error(`${label} must be an array of strings`);\n return value.map((item, index) => {\n if (typeof item !== 'string') throw new Error(`${label}[${index}] must be a string`);\n return item;\n });\n}\n\nfunction optionalStringRecord(value: unknown, label: string): Record<string, string> | undefined {\n if (value === undefined) return undefined;\n if (!isObject(value)) throw new Error(`${label} must be an object of string values`);\n return Object.fromEntries(\n Object.entries(value).map(([key, item]) => {\n if (typeof item !== 'string') throw new Error(`${label}.${key} must be a string`);\n return [key, item];\n }),\n );\n}\n\nexport function expandPluginPlaceholders(value: string, pluginRoot: string, pluginDataDirectory: string): string {\n // The portable contract is a single, non-recursive replacement pass. An\n // unrecognised placeholder remains literal and mcp-proxy must not reinterpret it.\n return value.replace(/\\$\\{PLUGIN_(ROOT|DATA)\\}/gu, (placeholder) =>\n placeholder === '${PLUGIN_ROOT}' ? pluginRoot : pluginDataDirectory,\n );\n}\n\nexport function isInside(root: string, candidate: string): boolean {\n const relative = path.relative(root, candidate);\n return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));\n}\n\nexport function normalizeEnvironment(\n value: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n): Record<string, string> {\n const declared = optionalStringRecord(value, 'env') ?? {};\n for (const key of Object.keys(declared)) {\n const reservedKey = process.platform === 'win32' ? key.toUpperCase() : key;\n if (RESERVED_ENVIRONMENT_KEYS.has(reservedKey)) {\n throw new Error(`env key \"${key}\" is reserved by Agent Plugins`);\n }\n }\n return {\n ...Object.fromEntries(\n Object.entries(declared).map(([key, item]) => [\n key,\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n ]),\n ),\n PLUGIN_ROOT: pluginRoot,\n PLUGIN_DATA: pluginDataDirectory,\n };\n}\n\nfunction isLoopbackHost(hostname: string): boolean {\n const bareHostname = hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname;\n if (bareHostname.toLowerCase() === 'localhost') return true;\n if (isIPv4(bareHostname)) return bareHostname.split('.')[0] === '127';\n return bareHostname === '::1';\n}\n\nexport function normalizeUrl(value: unknown): string {\n const raw = nonEmptyString(value, 'url');\n let parsed: URL;\n try {\n parsed = new URL(raw);\n } catch {\n throw new Error('url must be an absolute HTTP(S) URL');\n }\n if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {\n throw new Error('url must use http or https');\n }\n if (parsed.username || parsed.password) throw new Error('url must not contain user information');\n if (parsed.hash) throw new Error('url must not contain a fragment');\n if (parsed.protocol === 'http:' && !isLoopbackHost(parsed.hostname)) {\n throw new Error('non-loopback MCP URLs must use https');\n }\n return raw;\n}\n\nexport function normalizeHeaders(value: unknown): Record<string, string> | undefined {\n const headers = optionalStringRecord(value, 'headers');\n if (!headers) return undefined;\n const seen = new Set<string>();\n for (const [name, item] of Object.entries(headers)) {\n const canonical = name.toLowerCase();\n if (seen.has(canonical)) throw new Error(`headers contain duplicate name \"${name}\"`);\n seen.add(canonical);\n if (!HTTP_TOKEN.test(name) || INVALID_HEADER_VALUE_CHARACTER.test(item)) {\n throw new Error(`header \"${name}\" is invalid`);\n }\n }\n return headers;\n}\n\nexport function stagedInternalPath(\n source: PoMcpAgentPluginProjectionSource,\n contents: string,\n stagingDirectory: string,\n): string {\n const digest = createHash('sha256')\n .update(source.sourceId)\n .update('\\0')\n .update(source.contentDigest)\n .update('\\0')\n .update(contents)\n .digest('hex')\n .slice(0, 20);\n return path.join(stagingDirectory, `agent-plugin-mcp-${digest}.internal.json`);\n}\n\nexport function emptyResult(diagnostic: string): NormalizedAgentPluginMcpSource {\n return {\n claudeConfig: { mcpServers: {} },\n serverNames: [],\n droppedServers: [],\n diagnostics: [diagnostic],\n };\n}\n\nexport function sourceLabel(source: PoMcpAgentPluginProjectionSource): string {\n return `Agent Plugin MCP source \"${source.sourceId}\"`;\n}\n\n/** Checks the projection identity before any file is touched. */\nexport function assertProjectionSource(source: PoMcpAgentPluginProjectionSource): void {\n if (source.mcpSchemaUrl !== AGENT_PLUGIN_MCP_SCHEMA_URL) {\n throw new Error(`unsupported schema \"${String(source.mcpSchemaUrl)}\"`);\n }\n if (!path.isAbsolute(source.pluginRoot) || !path.isAbsolute(source.pluginDataDirectory)) {\n throw new Error('pluginRoot and pluginDataDirectory must be absolute');\n }\n}\n\nexport function assertRootConfigPath(configPath: string, pluginRoot: string): void {\n if (path.dirname(configPath) !== pluginRoot || path.basename(configPath) !== 'mcp.json') {\n throw new Error('portable plugin config must be root mcp.json');\n }\n}\n\n/** Verifies the digest and document shape of the raw mcp.json bytes; returns its server map. */\nexport function parseMcpDocument(\n source: PoMcpAgentPluginProjectionSource,\n bytes: Uint8Array,\n label: string,\n): Record<string, unknown> {\n const digest = createHash('sha256').update(bytes).digest('hex');\n if (digest !== source.contentDigest) throw new Error('content digest does not match the projection');\n const parsed: unknown = JSON.parse(new TextDecoder('utf-8', { ignoreBOM: true }).decode(bytes));\n if (!isObject(parsed)) throw new Error('document must be an object');\n onlyKeys(parsed, ['$schema', 'mcpServers'], label);\n if (parsed.$schema !== source.mcpSchemaUrl) throw new Error('$schema does not match the projected schema');\n if (!isObject(parsed.mcpServers)) throw new Error('mcpServers must be an object');\n return parsed.mcpServers;\n}\n\n/** Whether a declared server is skipped (empty name), dropped by the allowlist or wrapper rule, or normalised. */\nexport function serverDisposition(name: string, options: NormalizeAgentPluginMcpOptions): 'empty' | 'dropped' | 'keep' {\n if (!name) return 'empty';\n const allowed = options.allowedServers;\n const keepAll = !allowed || allowed.length === 0;\n const stripProxyWrappers = options.stripProxyWrappers ?? true;\n if ((!keepAll && !allowed.includes(name)) || (stripProxyWrappers && PROXY_SERVER_ALIASES.has(name))) return 'dropped';\n return 'keep';\n}\n\nexport function emptyServerDiagnostic(label: string): string {\n return `${label} contains an empty server name; that entry was skipped.`;\n}\n\nexport function skippedServerDiagnostic(label: string, name: string, error: unknown): string {\n return `${label} skipped server \"${name}\": ${error instanceof Error ? error.message : String(error)}`;\n}\n\nexport function disabledResult(label: string, error: unknown): NormalizedAgentPluginMcpSource {\n return emptyResult(`${label} was disabled: ${error instanceof Error ? error.message : String(error)}`);\n}\n\n/** The declared transport of one server; stdio declarations are also checked for unsupported fields. */\nexport function serverType(raw: unknown, name: string): string {\n if (!isObject(raw)) throw new Error('definition must be an object');\n const type = nonEmptyString(raw.type, 'type');\n if (type === 'stdio') onlyKeys(raw, ['type', 'command', 'args', 'env', 'cwd'], `server \"${name}\"`);\n return type;\n}\n\nexport function stdioServer(\n name: string,\n config: { command: string; args?: string[]; env: Record<string, string>; cwd: string },\n): NormalizedServer {\n return {\n internal: { name, transport: 'stdio', config },\n claude: { type: 'stdio', ...config },\n };\n}\n\n/** A streamable-http or sse server; any other type is unsupported. */\nexport function remoteServer(raw: JsonObject, name: string, type: string): NormalizedServer {\n if (type === 'streamable-http' || type === 'sse') {\n onlyKeys(raw, ['type', 'url', 'headers'], `server \"${name}\"`);\n const url = normalizeUrl(raw.url);\n const headers = normalizeHeaders(raw.headers);\n const transport = type === 'streamable-http' ? 'http' : 'sse';\n const config = { url, ...(headers ? { headers } : {}) };\n return {\n internal: { name, transport, config },\n claude: { type: transport, ...config },\n };\n }\n throw new Error(`unsupported transport type \"${type}\"`);\n}\n\nexport function stagedContents(internalServers: Record<string, JsonObject>): string {\n return `${JSON.stringify({ mcpServers: internalServers }, null, 2)}\\n`;\n}\n\nexport function stagedCacheKey(source: PoMcpAgentPluginProjectionSource, configPath: string, contents: string): string {\n return createHash('sha256')\n .update('agent-plugin-v1\\0')\n .update(source.sourceId)\n .update('\\0')\n .update(source.contentDigest)\n .update('\\0')\n .update(configPath)\n .update('\\0')\n .update(contents)\n .digest('hex');\n}\n\n/** The containment base and expanded path of a declared cwd, or undefined when the plugin root is the default. */\nexport function workingDirectoryCandidate(\n declared: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n): { base: string; candidate: string } | undefined {\n if (declared === undefined) return undefined;\n const cwd = nonEmptyString(declared, 'cwd');\n if (cwd.startsWith('./')) return { base: pluginRoot, candidate: path.resolve(pluginRoot, cwd) };\n const expanded = expandPluginPlaceholders(cwd, pluginRoot, pluginDataDirectory);\n if (cwd === '${PLUGIN_ROOT}' || cwd.startsWith('${PLUGIN_ROOT}/')) {\n return { base: pluginRoot, candidate: path.resolve(expanded) };\n }\n if (cwd === '${PLUGIN_DATA}' || cwd.startsWith('${PLUGIN_DATA}/')) {\n return { base: pluginDataDirectory, candidate: path.resolve(expanded) };\n }\n throw new Error('cwd must start with ./, ${PLUGIN_ROOT}, or ${PLUGIN_DATA}');\n}\n\n/** Rejects a command that is neither a bare executable name nor a ./ path; true when it must be resolved. */\nexport function isPluginRelativeCommand(command: string): boolean {\n if (command.startsWith('./')) return true;\n if (command === '.' || command === '..' || /[\\s/\\\\]/u.test(command)) {\n throw new Error('command must be a bare executable name or a ./ path inside the plugin');\n }\n return false;\n}\n","import { randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport type { PoMcpAgentPluginProjectionSource } from '@agimon-ai/po-core/mcpProjection';\n\nimport {\n type JsonObject,\n type NormalizeAgentPluginMcpOptions,\n type NormalizedAgentPluginMcpSource,\n type NormalizedServer,\n PRIVATE_DIRECTORY_MODE,\n PRIVATE_FILE_MODE,\n assertProjectionSource,\n assertRootConfigPath,\n disabledResult,\n emptyServerDiagnostic,\n expandPluginPlaceholders,\n isInside,\n isPluginRelativeCommand,\n nonEmptyString,\n normalizeEnvironment,\n optionalStringArray,\n parseMcpDocument,\n remoteServer,\n serverDisposition,\n serverType,\n skippedServerDiagnostic,\n sourceLabel,\n stagedCacheKey,\n stagedContents,\n stagedInternalPath,\n stdioServer,\n workingDirectoryCandidate,\n} from './normalize';\n\nfunction realContainedPath(root: string, candidate: string, label: string): string {\n let realCandidate: string;\n try {\n realCandidate = fs.realpathSync(candidate);\n } catch {\n throw new Error(`${label} does not exist`);\n }\n if (!isInside(root, realCandidate)) throw new Error(`${label} escapes its allowed plugin directory`);\n return realCandidate;\n}\n\nfunction normalizeCommand(command: string, pluginRoot: string): string {\n if (!isPluginRelativeCommand(command)) return command;\n const resolved = realContainedPath(pluginRoot, path.resolve(pluginRoot, command), 'command');\n if (!fs.statSync(resolved).isFile()) throw new Error('command must resolve to a regular file');\n try {\n fs.accessSync(resolved, fs.constants.X_OK);\n } catch {\n throw new Error('command must resolve to an executable file');\n }\n return resolved;\n}\n\nfunction normalizeWorkingDirectory(declared: unknown, pluginRoot: string, pluginDataDirectory: string): string {\n const declaredCwd = workingDirectoryCandidate(declared, pluginRoot, pluginDataDirectory);\n if (!declaredCwd) return pluginRoot;\n const resolved = realContainedPath(declaredCwd.base, declaredCwd.candidate, 'cwd');\n if (!fs.statSync(resolved).isDirectory()) throw new Error('cwd must resolve to a directory');\n return resolved;\n}\n\nfunction normalizeServer(\n raw: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n name: string,\n): NormalizedServer {\n const type = serverType(raw, name);\n const declaration = raw as JsonObject;\n if (type !== 'stdio') return remoteServer(declaration, name, type);\n const command = normalizeCommand(nonEmptyString(declaration.command, 'command'), pluginRoot);\n const args = optionalStringArray(declaration.args, 'args')?.map((item) =>\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n );\n const env = normalizeEnvironment(declaration.env, pluginRoot, pluginDataDirectory);\n const cwd = normalizeWorkingDirectory(declaration.cwd, pluginRoot, pluginDataDirectory);\n return stdioServer(name, { command, ...(args ? { args } : {}), env, cwd });\n}\n\nfunction writeStagedInternalConfig(target: string, contents: string, stagingDirectory: string): void {\n fs.mkdirSync(stagingDirectory, { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n fs.chmodSync(stagingDirectory, PRIVATE_DIRECTORY_MODE);\n const temporaryPath = `${target}.${process.pid}-${randomUUID()}.tmp`;\n try {\n fs.writeFileSync(temporaryPath, contents, { flag: 'wx', mode: PRIVATE_FILE_MODE });\n try {\n fs.renameSync(temporaryPath, target);\n } catch (error) {\n const code = (error as NodeJS.ErrnoException).code;\n if (code !== 'EEXIST' && code !== 'EPERM') throw error;\n const stat = fs.lstatSync(target);\n if (stat.isSymbolicLink() || !stat.isFile() || fs.readFileSync(target, 'utf8') !== contents) {\n throw new Error('content-addressed staging path is occupied by different content');\n }\n }\n fs.chmodSync(target, PRIVATE_FILE_MODE);\n } finally {\n fs.rmSync(temporaryPath, { force: true });\n }\n}\n\n/**\n * Validates one Agent Plugins v1 `mcp.json` and stages a native mcp-proxy layer.\n *\n * Server validation is isolated: one malformed server is diagnosed and skipped.\n * Document/schema, source identity, or plugin-boundary failures reject the whole\n * source. Only the two portable plugin placeholders are expanded; the staged\n * layer is tagged `internal`, so legacy `${ENV}` interpolation cannot run again.\n *\n * @deprecated Node-only sync shim; use normalizeAgentPluginMcpSourceAsync. Removed in M2.\n */\nexport function normalizeAgentPluginMcpSource(\n source: PoMcpAgentPluginProjectionSource,\n options: NormalizeAgentPluginMcpOptions,\n): NormalizedAgentPluginMcpSource {\n const label = sourceLabel(source);\n try {\n assertProjectionSource(source);\n const pluginRoot = fs.realpathSync(source.pluginRoot);\n try {\n const dataStat = fs.lstatSync(source.pluginDataDirectory);\n if (dataStat.isSymbolicLink() || !dataStat.isDirectory()) {\n throw new Error('pluginDataDirectory must be a real directory');\n }\n } catch (error) {\n if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw error;\n fs.mkdirSync(source.pluginDataDirectory, { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n }\n fs.chmodSync(source.pluginDataDirectory, PRIVATE_DIRECTORY_MODE);\n fs.accessSync(source.pluginDataDirectory, fs.constants.W_OK);\n const pluginDataDirectory = fs.realpathSync(source.pluginDataDirectory);\n const configPath = realContainedPath(pluginRoot, source.configPath, 'mcp.json');\n assertRootConfigPath(configPath, pluginRoot);\n\n const servers = parseMcpDocument(source, fs.readFileSync(configPath), label);\n const internalServers = Object.create(null) as Record<string, JsonObject>;\n const claudeServers = Object.create(null) as Record<string, JsonObject>;\n const droppedServers: string[] = [];\n const diagnostics: string[] = [];\n\n for (const [name, rawServer] of Object.entries(servers)) {\n const disposition = serverDisposition(name, options);\n if (disposition === 'empty') {\n diagnostics.push(emptyServerDiagnostic(label));\n continue;\n }\n if (disposition === 'dropped') {\n droppedServers.push(name);\n continue;\n }\n try {\n const normalized = normalizeServer(rawServer, pluginRoot, pluginDataDirectory, name);\n internalServers[name] = normalized.internal;\n claudeServers[name] = normalized.claude;\n } catch (error) {\n droppedServers.push(name);\n diagnostics.push(skippedServerDiagnostic(label, name, error));\n }\n }\n\n const contents = stagedContents(internalServers);\n const target = stagedInternalPath(source, contents, options.stagingDirectory);\n writeStagedInternalConfig(target, contents, options.stagingDirectory);\n return {\n configSource: { path: target, format: 'internal', cacheKey: stagedCacheKey(source, configPath, contents) },\n claudeConfig: { mcpServers: claudeServers },\n serverNames: Object.keys(internalServers),\n droppedServers,\n diagnostics,\n };\n } catch (error) {\n return disabledResult(label, error);\n }\n}\n","import path from 'node:path';\n\nimport type { PoMcpAgentPluginProjectionSource } from '@agimon-ai/po-core/mcpProjection';\nimport { type FileSystem, getOrThrow, nodeHost, writeFileAtomic } from '@agimon-ai/po-core/platform';\n\nimport {\n type JsonObject,\n type NormalizeAgentPluginMcpOptions,\n type NormalizedAgentPluginMcpSource,\n type NormalizedServer,\n PRIVATE_DIRECTORY_MODE,\n PRIVATE_FILE_MODE,\n assertProjectionSource,\n assertRootConfigPath,\n disabledResult,\n emptyServerDiagnostic,\n expandPluginPlaceholders,\n isInside,\n isPluginRelativeCommand,\n nonEmptyString,\n normalizeEnvironment,\n optionalStringArray,\n parseMcpDocument,\n remoteServer,\n serverDisposition,\n serverType,\n skippedServerDiagnostic,\n sourceLabel,\n stagedCacheKey,\n stagedContents,\n stagedInternalPath,\n stdioServer,\n workingDirectoryCandidate,\n} from './normalize';\n\nexport type {\n AgentPluginMcpConfigSource,\n NormalizeAgentPluginMcpOptions,\n NormalizedAgentPluginMcpSource,\n} from './normalize';\nexport { normalizeAgentPluginMcpSource } from './sync';\n\ntype Context = Parameters<FileSystem['readTextFile']>[1];\n\nasync function realContainedPath(\n fs: FileSystem,\n root: string,\n candidate: string,\n label: string,\n context: Context,\n): Promise<string> {\n const real = await fs.canonicalPath(candidate, context);\n if (!real.ok) throw new Error(`${label} does not exist`);\n if (!isInside(root, real.value)) throw new Error(`${label} escapes its allowed plugin directory`);\n return real.value;\n}\n\nasync function normalizeCommand(\n fs: FileSystem,\n command: string,\n pluginRoot: string,\n context: Context,\n): Promise<string> {\n if (!isPluginRelativeCommand(command)) return command;\n const resolved = await realContainedPath(fs, pluginRoot, path.resolve(pluginRoot, command), 'command', context);\n if (getOrThrow(await fs.fileInfo(resolved, context)).kind !== 'file') {\n throw new Error('command must resolve to a regular file');\n }\n // Execute bits stand in for access(X_OK); the edge has no modes, so nodeHost reports none and the check is skipped.\n const mode = await nodeHost.fileMode(resolved);\n if (mode !== undefined && (mode & 0o111) === 0) throw new Error('command must resolve to an executable file');\n return resolved;\n}\n\nasync function normalizeWorkingDirectory(\n fs: FileSystem,\n declared: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n context: Context,\n): Promise<string> {\n const declaredCwd = workingDirectoryCandidate(declared, pluginRoot, pluginDataDirectory);\n if (!declaredCwd) return pluginRoot;\n const resolved = await realContainedPath(fs, declaredCwd.base, declaredCwd.candidate, 'cwd', context);\n if (getOrThrow(await fs.fileInfo(resolved, context)).kind !== 'directory') {\n throw new Error('cwd must resolve to a directory');\n }\n return resolved;\n}\n\nasync function normalizeServer(\n fs: FileSystem,\n raw: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n name: string,\n context: Context,\n): Promise<NormalizedServer> {\n const type = serverType(raw, name);\n const declaration = raw as JsonObject;\n if (type !== 'stdio') return remoteServer(declaration, name, type);\n const command = await normalizeCommand(fs, nonEmptyString(declaration.command, 'command'), pluginRoot, context);\n const args = optionalStringArray(declaration.args, 'args')?.map((item) =>\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n );\n const env = normalizeEnvironment(declaration.env, pluginRoot, pluginDataDirectory);\n const cwd = await normalizeWorkingDirectory(fs, declaration.cwd, pluginRoot, pluginDataDirectory, context);\n return stdioServer(name, { command, ...(args ? { args } : {}), env, cwd });\n}\n\n/** Owner-only plugin data directory; a symbolic link or non-directory rejects the source. */\nasync function preparePluginDataDirectory(fs: FileSystem, directory: string, context: Context): Promise<string> {\n const info = await fs.fileInfo(directory, context);\n if (info.ok) {\n if (info.value.kind !== 'directory') throw new Error('pluginDataDirectory must be a real directory');\n } else if (info.error.code === 'not_found') {\n getOrThrow(await fs.createDir(directory, { recursive: true }, context));\n } else {\n throw info.error;\n }\n await nodeHost.setMode(directory, PRIVATE_DIRECTORY_MODE);\n return getOrThrow(await fs.canonicalPath(directory, context));\n}\n\n/**\n * Content-addressed and owner-only. The name hashes the contents, so replacing an\n * existing staged file through a uniquely named temporary file never changes what it holds.\n */\nasync function writeStagedInternalConfig(\n fs: FileSystem,\n target: string,\n contents: string,\n stagingDirectory: string,\n context: Context,\n): Promise<void> {\n getOrThrow(await fs.createDir(stagingDirectory, { recursive: true }, context));\n await nodeHost.setMode(stagingDirectory, PRIVATE_DIRECTORY_MODE);\n await writeFileAtomic(fs, target, contents, context);\n await nodeHost.setMode(target, PRIVATE_FILE_MODE);\n}\n\n/**\n * Validates one Agent Plugins v1 `mcp.json` and stages a native mcp-proxy layer,\n * reading and writing through the injected file system.\n *\n * Server validation is isolated: one malformed server is diagnosed and skipped.\n * Document/schema, source identity, or plugin-boundary failures reject the whole\n * source. Only the two portable plugin placeholders are expanded; the staged\n * layer is tagged `internal`, so legacy `${ENV}` interpolation cannot run again.\n */\nexport async function normalizeAgentPluginMcpSourceAsync(\n fs: FileSystem,\n source: PoMcpAgentPluginProjectionSource,\n options: NormalizeAgentPluginMcpOptions,\n context: Context,\n): Promise<NormalizedAgentPluginMcpSource> {\n const label = sourceLabel(source);\n try {\n assertProjectionSource(source);\n const pluginRoot = getOrThrow(await fs.canonicalPath(source.pluginRoot, context));\n const pluginDataDirectory = await preparePluginDataDirectory(fs, source.pluginDataDirectory, context);\n const configPath = await realContainedPath(fs, pluginRoot, source.configPath, 'mcp.json', context);\n assertRootConfigPath(configPath, pluginRoot);\n\n const bytes = getOrThrow(await fs.readBinaryFile(configPath, context));\n const servers = parseMcpDocument(source, bytes, label);\n const internalServers = Object.create(null) as Record<string, JsonObject>;\n const claudeServers = Object.create(null) as Record<string, JsonObject>;\n const droppedServers: string[] = [];\n const diagnostics: string[] = [];\n\n for (const [name, rawServer] of Object.entries(servers)) {\n const disposition = serverDisposition(name, options);\n if (disposition === 'empty') {\n diagnostics.push(emptyServerDiagnostic(label));\n continue;\n }\n if (disposition === 'dropped') {\n droppedServers.push(name);\n continue;\n }\n try {\n const normalized = await normalizeServer(fs, rawServer, pluginRoot, pluginDataDirectory, name, context);\n internalServers[name] = normalized.internal;\n claudeServers[name] = normalized.claude;\n } catch (error) {\n droppedServers.push(name);\n diagnostics.push(skippedServerDiagnostic(label, name, error));\n }\n }\n\n const contents = stagedContents(internalServers);\n const target = stagedInternalPath(source, contents, options.stagingDirectory);\n await writeStagedInternalConfig(fs, target, contents, options.stagingDirectory, context);\n return {\n configSource: { path: target, format: 'internal', cacheKey: stagedCacheKey(source, configPath, contents) },\n claudeConfig: { mcpServers: claudeServers },\n serverNames: Object.keys(internalServers),\n droppedServers,\n diagnostics,\n };\n } catch (error) {\n return disabledResult(label, error);\n }\n}\n"],"mappings":";;;;;;;;AAOA,MAAM,aAAa;;AAEnB,MAAM,iCAAiC;AACvC,MAAM,aAAa;AACnB,MAAM,eAAe,IAAI,OAAO,IAAI,WAAW,QAAQ,WAAW,QAAQ,GAAG;AAE7E,SAAS,OAAO,OAAwB;CACtC,OAAO,aAAa,KAAK,KAAK;AAChC;AAIA,MAAa,4CAA4B,IAAI,IAAI,CAAC,eAAe,aAAa,CAAC;AAC/E,MAAa,uCAAuB,IAAI,IAAI,CAAC,aAAa,eAAe,CAAC;AAiC1E,SAAgB,SAAS,OAAqC;CAC5D,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAgB,SAAS,OAAmB,SAA4B,OAAqB;CAC3F,MAAM,aAAa,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,SAAS,GAAG,CAAC;CAC1E,IAAI,YAAY,MAAM,IAAI,MAAM,GAAG,MAAM,+BAA+B,WAAW,EAAE;AACvF;AAEA,SAAgB,eAAe,OAAgB,OAAuB;CACpE,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CAC1G,OAAO;AACT;AAEA,SAAgB,oBAAoB,OAAgB,OAAqC;CACvF,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,6BAA6B;CACjF,OAAO,MAAM,KAAK,MAAM,UAAU;EAChC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,mBAAmB;EACnF,OAAO;CACT,CAAC;AACH;AAEA,SAAS,qBAAqB,OAAgB,OAAmD;CAC/F,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,oCAAoC;CACnF,OAAO,OAAO,YACZ,OAAO,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU;EACzC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,kBAAkB;EAChF,OAAO,CAAC,KAAK,IAAI;CACnB,CAAC,CACH;AACF;AAEA,SAAgB,yBAAyB,OAAe,YAAoB,qBAAqC;CAG/G,OAAO,MAAM,QAAQ,+BAA+B,gBAClD,gBAAgB,mBAAmB,aAAa,mBAClD;AACF;AAEA,SAAgB,SAAS,MAAc,WAA4B;CACjE,MAAM,WAAW,KAAK,SAAS,MAAM,SAAS;CAC9C,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,KAAK,KAAK,KAAK,KAAK,aAAa,QAAQ,CAAC,KAAK,WAAW,QAAQ;AACpH;AAEA,SAAgB,qBACd,OACA,YACA,qBACwB;CACxB,MAAM,WAAW,qBAAqB,OAAO,KAAK,KAAK,CAAC;CACxD,KAAK,MAAM,OAAO,OAAO,KAAK,QAAQ,GAAG;EACvC,MAAM,cAAc,QAAQ,aAAa,UAAU,IAAI,YAAY,IAAI;EACvE,IAAI,0BAA0B,IAAI,WAAW,GAC3C,MAAM,IAAI,MAAM,YAAY,IAAI,+BAA+B;CAEnE;CACA,OAAO;EACL,GAAG,OAAO,YACR,OAAO,QAAQ,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU,CAC5C,KACA,yBAAyB,MAAM,YAAY,mBAAmB,CAChE,CAAC,CACH;EACA,aAAa;EACb,aAAa;CACf;AACF;AAEA,SAAS,eAAe,UAA2B;CACjD,MAAM,eAAe,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG,IAAI,SAAS,MAAM,GAAG,EAAE,IAAI;CAClG,IAAI,aAAa,YAAY,MAAM,aAAa,OAAO;CACvD,IAAI,OAAO,YAAY,GAAG,OAAO,aAAa,MAAM,GAAG,CAAC,CAAC,OAAO;CAChE,OAAO,iBAAiB;AAC1B;AAEA,SAAgB,aAAa,OAAwB;CACnD,MAAM,MAAM,eAAe,OAAO,KAAK;CACvC,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN,MAAM,IAAI,MAAM,qCAAqC;CACvD;CACA,IAAI,OAAO,aAAa,WAAW,OAAO,aAAa,UACrD,MAAM,IAAI,MAAM,4BAA4B;CAE9C,IAAI,OAAO,YAAY,OAAO,UAAU,MAAM,IAAI,MAAM,uCAAuC;CAC/F,IAAI,OAAO,MAAM,MAAM,IAAI,MAAM,iCAAiC;CAClE,IAAI,OAAO,aAAa,WAAW,CAAC,eAAe,OAAO,QAAQ,GAChE,MAAM,IAAI,MAAM,sCAAsC;CAExD,OAAO;AACT;AAEA,SAAgB,iBAAiB,OAAoD;CACnF,MAAM,UAAU,qBAAqB,OAAO,SAAS;CACrD,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,OAAO,GAAG;EAClD,MAAM,YAAY,KAAK,YAAY;EACnC,IAAI,KAAK,IAAI,SAAS,GAAG,MAAM,IAAI,MAAM,mCAAmC,KAAK,EAAE;EACnF,KAAK,IAAI,SAAS;EAClB,IAAI,CAAC,WAAW,KAAK,IAAI,KAAK,+BAA+B,KAAK,IAAI,GACpE,MAAM,IAAI,MAAM,WAAW,KAAK,aAAa;CAEjD;CACA,OAAO;AACT;AAEA,SAAgB,mBACd,QACA,UACA,kBACQ;CACR,MAAM,SAAS,WAAW,QAAQ,CAAC,CAChC,OAAO,OAAO,QAAQ,CAAC,CACvB,OAAO,IAAI,CAAC,CACZ,OAAO,OAAO,aAAa,CAAC,CAC5B,OAAO,IAAI,CAAC,CACZ,OAAO,QAAQ,CAAC,CAChB,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EAAE;CACd,OAAO,KAAK,KAAK,kBAAkB,oBAAoB,OAAO,eAAe;AAC/E;AAEA,SAAgB,YAAY,YAAoD;CAC9E,OAAO;EACL,cAAc,EAAE,YAAY,CAAC,EAAE;EAC/B,aAAa,CAAC;EACd,gBAAgB,CAAC;EACjB,aAAa,CAAC,UAAU;CAC1B;AACF;AAEA,SAAgB,YAAY,QAAkD;CAC5E,OAAO,4BAA4B,OAAO,SAAS;AACrD;;AAGA,SAAgB,uBAAuB,QAAgD;CACrF,IAAI,OAAO,iBAAiB,6BAC1B,MAAM,IAAI,MAAM,uBAAuB,OAAO,OAAO,YAAY,EAAE,EAAE;CAEvE,IAAI,CAAC,KAAK,WAAW,OAAO,UAAU,KAAK,CAAC,KAAK,WAAW,OAAO,mBAAmB,GACpF,MAAM,IAAI,MAAM,qDAAqD;AAEzE;AAEA,SAAgB,qBAAqB,YAAoB,YAA0B;CACjF,IAAI,KAAK,QAAQ,UAAU,MAAM,cAAc,KAAK,SAAS,UAAU,MAAM,YAC3E,MAAM,IAAI,MAAM,8CAA8C;AAElE;;AAGA,SAAgB,iBACd,QACA,OACA,OACyB;CAEzB,IADe,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAChD,MAAM,OAAO,eAAe,MAAM,IAAI,MAAM,8CAA8C;CACnG,MAAM,SAAkB,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,WAAW,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC;CAC9F,IAAI,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,4BAA4B;CACnE,SAAS,QAAQ,CAAC,WAAW,YAAY,GAAG,KAAK;CACjD,IAAI,OAAO,YAAY,OAAO,cAAc,MAAM,IAAI,MAAM,6CAA6C;CACzG,IAAI,CAAC,SAAS,OAAO,UAAU,GAAG,MAAM,IAAI,MAAM,8BAA8B;CAChF,OAAO,OAAO;AAChB;;AAGA,SAAgB,kBAAkB,MAAc,SAAuE;CACrH,IAAI,CAAC,MAAM,OAAO;CAClB,MAAM,UAAU,QAAQ;CACxB,MAAM,UAAU,CAAC,WAAW,QAAQ,WAAW;CAC/C,MAAM,qBAAqB,QAAQ,sBAAsB;CACzD,IAAK,CAAC,WAAW,CAAC,QAAQ,SAAS,IAAI,KAAO,sBAAsB,qBAAqB,IAAI,IAAI,GAAI,OAAO;CAC5G,OAAO;AACT;AAEA,SAAgB,sBAAsB,OAAuB;CAC3D,OAAO,GAAG,MAAM;AAClB;AAEA,SAAgB,wBAAwB,OAAe,MAAc,OAAwB;CAC3F,OAAO,GAAG,MAAM,mBAAmB,KAAK,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpG;AAEA,SAAgB,eAAe,OAAe,OAAgD;CAC5F,OAAO,YAAY,GAAG,MAAM,iBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;AACvG;;AAGA,SAAgB,WAAW,KAAc,MAAsB;CAC7D,IAAI,CAAC,SAAS,GAAG,GAAG,MAAM,IAAI,MAAM,8BAA8B;CAClE,MAAM,OAAO,eAAe,IAAI,MAAM,MAAM;CAC5C,IAAI,SAAS,SAAS,SAAS,KAAK;EAAC;EAAQ;EAAW;EAAQ;EAAO;CAAK,GAAG,WAAW,KAAK,EAAE;CACjG,OAAO;AACT;AAEA,SAAgB,YACd,MACA,QACkB;CAClB,OAAO;EACL,UAAU;GAAE;GAAM,WAAW;GAAS;EAAO;EAC7C,QAAQ;GAAE,MAAM;GAAS,GAAG;EAAO;CACrC;AACF;;AAGA,SAAgB,aAAa,KAAiB,MAAc,MAAgC;CAC1F,IAAI,SAAS,qBAAqB,SAAS,OAAO;EAChD,SAAS,KAAK;GAAC;GAAQ;GAAO;EAAS,GAAG,WAAW,KAAK,EAAE;EAC5D,MAAM,MAAM,aAAa,IAAI,GAAG;EAChC,MAAM,UAAU,iBAAiB,IAAI,OAAO;EAC5C,MAAM,YAAY,SAAS,oBAAoB,SAAS;EACxD,MAAM,SAAS;GAAE;GAAK,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;EAAG;EACtD,OAAO;GACL,UAAU;IAAE;IAAM;IAAW;GAAO;GACpC,QAAQ;IAAE,MAAM;IAAW,GAAG;GAAO;EACvC;CACF;CACA,MAAM,IAAI,MAAM,+BAA+B,KAAK,EAAE;AACxD;AAEA,SAAgB,eAAe,iBAAqD;CAClF,OAAO,GAAG,KAAK,UAAU,EAAE,YAAY,gBAAgB,GAAG,MAAM,CAAC,EAAE;AACrE;AAEA,SAAgB,eAAe,QAA0C,YAAoB,UAA0B;CACrH,OAAO,WAAW,QAAQ,CAAC,CACxB,OAAO,mBAAmB,CAAC,CAC3B,OAAO,OAAO,QAAQ,CAAC,CACvB,OAAO,IAAI,CAAC,CACZ,OAAO,OAAO,aAAa,CAAC,CAC5B,OAAO,IAAI,CAAC,CACZ,OAAO,UAAU,CAAC,CAClB,OAAO,IAAI,CAAC,CACZ,OAAO,QAAQ,CAAC,CAChB,OAAO,KAAK;AACjB;;AAGA,SAAgB,0BACd,UACA,YACA,qBACiD;CACjD,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;CACnC,MAAM,MAAM,eAAe,UAAU,KAAK;CAC1C,IAAI,IAAI,WAAW,IAAI,GAAG,OAAO;EAAE,MAAM;EAAY,WAAW,KAAK,QAAQ,YAAY,GAAG;CAAE;CAC9F,MAAM,WAAW,yBAAyB,KAAK,YAAY,mBAAmB;CAC9E,IAAI,QAAQ,oBAAoB,IAAI,WAAW,iBAAiB,GAC9D,OAAO;EAAE,MAAM;EAAY,WAAW,KAAK,QAAQ,QAAQ;CAAE;CAE/D,IAAI,QAAQ,oBAAoB,IAAI,WAAW,iBAAiB,GAC9D,OAAO;EAAE,MAAM;EAAqB,WAAW,KAAK,QAAQ,QAAQ;CAAE;CAExE,MAAM,IAAI,MAAM,2DAA2D;AAC7E;;AAGA,SAAgB,wBAAwB,SAA0B;CAChE,IAAI,QAAQ,WAAW,IAAI,GAAG,OAAO;CACrC,IAAI,YAAY,OAAO,YAAY,QAAQ,WAAW,KAAK,OAAO,GAChE,MAAM,IAAI,MAAM,uEAAuE;CAEzF,OAAO;AACT;;;ACjSA,SAASA,oBAAkB,MAAc,WAAmB,OAAuB;CACjF,IAAI;CACJ,IAAI;EACF,gBAAgB,GAAG,aAAa,SAAS;CAC3C,QAAQ;EACN,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB;CAC3C;CACA,IAAI,CAAC,SAAS,MAAM,aAAa,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,sCAAsC;CACnG,OAAO;AACT;AAEA,SAASC,mBAAiB,SAAiB,YAA4B;CACrE,IAAI,CAAC,wBAAwB,OAAO,GAAG,OAAO;CAC9C,MAAM,WAAWD,oBAAkB,YAAY,KAAK,QAAQ,YAAY,OAAO,GAAG,SAAS;CAC3F,IAAI,CAAC,GAAG,SAAS,QAAQ,CAAC,CAAC,OAAO,GAAG,MAAM,IAAI,MAAM,wCAAwC;CAC7F,IAAI;EACF,GAAG,WAAW,UAAU,GAAG,UAAU,IAAI;CAC3C,QAAQ;EACN,MAAM,IAAI,MAAM,4CAA4C;CAC9D;CACA,OAAO;AACT;AAEA,SAASE,4BAA0B,UAAmB,YAAoB,qBAAqC;CAC7G,MAAM,cAAc,0BAA0B,UAAU,YAAY,mBAAmB;CACvF,IAAI,CAAC,aAAa,OAAO;CACzB,MAAM,WAAWF,oBAAkB,YAAY,MAAM,YAAY,WAAW,KAAK;CACjF,IAAI,CAAC,GAAG,SAAS,QAAQ,CAAC,CAAC,YAAY,GAAG,MAAM,IAAI,MAAM,iCAAiC;CAC3F,OAAO;AACT;AAEA,SAASG,kBACP,KACA,YACA,qBACA,MACkB;CAClB,MAAM,OAAO,WAAW,KAAK,IAAI;CACjC,MAAM,cAAc;CACpB,IAAI,SAAS,SAAS,OAAO,aAAa,aAAa,MAAM,IAAI;CACjE,MAAM,UAAUF,mBAAiB,eAAe,YAAY,SAAS,SAAS,GAAG,UAAU;CAC3F,MAAM,OAAO,oBAAoB,YAAY,MAAM,MAAM,CAAC,EAAE,KAAK,SAC/D,yBAAyB,MAAM,YAAY,mBAAmB,CAChE;CACA,MAAM,MAAM,qBAAqB,YAAY,KAAK,YAAY,mBAAmB;CACjF,MAAM,MAAMC,4BAA0B,YAAY,KAAK,YAAY,mBAAmB;CACtF,OAAO,YAAY,MAAM;EAAE;EAAS,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;EAAI;EAAK;CAAI,CAAC;AAC3E;AAEA,SAASE,4BAA0B,QAAgB,UAAkB,kBAAgC;CACnG,GAAG,UAAU,kBAAkB;EAAE,MAAA;EAA8B,WAAW;CAAK,CAAC;CAChF,GAAG,UAAU,kBAAA,GAAwC;CACrD,MAAM,gBAAgB,GAAG,OAAO,GAAG,QAAQ,IAAI,GAAG,WAAW,EAAE;CAC/D,IAAI;EACF,GAAG,cAAc,eAAe,UAAU;GAAE,MAAM;GAAM,MAAA;EAAwB,CAAC;EACjF,IAAI;GACF,GAAG,WAAW,eAAe,MAAM;EACrC,SAAS,OAAO;GACd,MAAM,OAAQ,MAAgC;GAC9C,IAAI,SAAS,YAAY,SAAS,SAAS,MAAM;GACjD,MAAM,OAAO,GAAG,UAAU,MAAM;GAChC,IAAI,KAAK,eAAe,KAAK,CAAC,KAAK,OAAO,KAAK,GAAG,aAAa,QAAQ,MAAM,MAAM,UACjF,MAAM,IAAI,MAAM,iEAAiE;EAErF;EACA,GAAG,UAAU,QAAA,GAAyB;CACxC,UAAU;EACR,GAAG,OAAO,eAAe,EAAE,OAAO,KAAK,CAAC;CAC1C;AACF;;;;;;;;;;;AAYA,SAAgB,8BACd,QACA,SACgC;CAChC,MAAM,QAAQ,YAAY,MAAM;CAChC,IAAI;EACF,uBAAuB,MAAM;EAC7B,MAAM,aAAa,GAAG,aAAa,OAAO,UAAU;EACpD,IAAI;GACF,MAAM,WAAW,GAAG,UAAU,OAAO,mBAAmB;GACxD,IAAI,SAAS,eAAe,KAAK,CAAC,SAAS,YAAY,GACrD,MAAM,IAAI,MAAM,8CAA8C;EAElE,SAAS,OAAO;GACd,IAAK,MAAgC,SAAS,UAAU,MAAM;GAC9D,GAAG,UAAU,OAAO,qBAAqB;IAAE,MAAA;IAA8B,WAAW;GAAK,CAAC;EAC5F;EACA,GAAG,UAAU,OAAO,qBAAA,GAA2C;EAC/D,GAAG,WAAW,OAAO,qBAAqB,GAAG,UAAU,IAAI;EAC3D,MAAM,sBAAsB,GAAG,aAAa,OAAO,mBAAmB;EACtE,MAAM,aAAaJ,oBAAkB,YAAY,OAAO,YAAY,UAAU;EAC9E,qBAAqB,YAAY,UAAU;EAE3C,MAAM,UAAU,iBAAiB,QAAQ,GAAG,aAAa,UAAU,GAAG,KAAK;EAC3E,MAAM,kBAAkB,OAAO,OAAO,IAAI;EAC1C,MAAM,gBAAgB,OAAO,OAAO,IAAI;EACxC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAE/B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,OAAO,GAAG;GACvD,MAAM,cAAc,kBAAkB,MAAM,OAAO;GACnD,IAAI,gBAAgB,SAAS;IAC3B,YAAY,KAAK,sBAAsB,KAAK,CAAC;IAC7C;GACF;GACA,IAAI,gBAAgB,WAAW;IAC7B,eAAe,KAAK,IAAI;IACxB;GACF;GACA,IAAI;IACF,MAAM,aAAaG,kBAAgB,WAAW,YAAY,qBAAqB,IAAI;IACnF,gBAAgB,QAAQ,WAAW;IACnC,cAAc,QAAQ,WAAW;GACnC,SAAS,OAAO;IACd,eAAe,KAAK,IAAI;IACxB,YAAY,KAAK,wBAAwB,OAAO,MAAM,KAAK,CAAC;GAC9D;EACF;EAEA,MAAM,WAAW,eAAe,eAAe;EAC/C,MAAM,SAAS,mBAAmB,QAAQ,UAAU,QAAQ,gBAAgB;EAC5E,4BAA0B,QAAQ,UAAU,QAAQ,gBAAgB;EACpE,OAAO;GACL,cAAc;IAAE,MAAM;IAAQ,QAAQ;IAAY,UAAU,eAAe,QAAQ,YAAY,QAAQ;GAAE;GACzG,cAAc,EAAE,YAAY,cAAc;GAC1C,aAAa,OAAO,KAAK,eAAe;GACxC;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO,eAAe,OAAO,KAAK;CACpC;AACF;;;ACvIA,eAAe,kBACb,IACA,MACA,WACA,OACA,SACiB;CACjB,MAAM,OAAO,MAAM,GAAG,cAAc,WAAW,OAAO;CACtD,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB;CACvD,IAAI,CAAC,SAAS,MAAM,KAAK,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,sCAAsC;CAChG,OAAO,KAAK;AACd;AAEA,eAAe,iBACb,IACA,SACA,YACA,SACiB;CACjB,IAAI,CAAC,wBAAwB,OAAO,GAAG,OAAO;CAC9C,MAAM,WAAW,MAAM,kBAAkB,IAAI,YAAY,KAAK,QAAQ,YAAY,OAAO,GAAG,WAAW,OAAO;CAC9G,IAAI,WAAW,MAAM,GAAG,SAAS,UAAU,OAAO,CAAC,CAAC,CAAC,SAAS,QAC5D,MAAM,IAAI,MAAM,wCAAwC;CAG1D,MAAM,OAAO,MAAM,SAAS,SAAS,QAAQ;CAC7C,IAAI,SAAS,KAAA,MAAc,OAAO,QAAW,GAAG,MAAM,IAAI,MAAM,4CAA4C;CAC5G,OAAO;AACT;AAEA,eAAe,0BACb,IACA,UACA,YACA,qBACA,SACiB;CACjB,MAAM,cAAc,0BAA0B,UAAU,YAAY,mBAAmB;CACvF,IAAI,CAAC,aAAa,OAAO;CACzB,MAAM,WAAW,MAAM,kBAAkB,IAAI,YAAY,MAAM,YAAY,WAAW,OAAO,OAAO;CACpG,IAAI,WAAW,MAAM,GAAG,SAAS,UAAU,OAAO,CAAC,CAAC,CAAC,SAAS,aAC5D,MAAM,IAAI,MAAM,iCAAiC;CAEnD,OAAO;AACT;AAEA,eAAe,gBACb,IACA,KACA,YACA,qBACA,MACA,SAC2B;CAC3B,MAAM,OAAO,WAAW,KAAK,IAAI;CACjC,MAAM,cAAc;CACpB,IAAI,SAAS,SAAS,OAAO,aAAa,aAAa,MAAM,IAAI;CACjE,MAAM,UAAU,MAAM,iBAAiB,IAAI,eAAe,YAAY,SAAS,SAAS,GAAG,YAAY,OAAO;CAC9G,MAAM,OAAO,oBAAoB,YAAY,MAAM,MAAM,CAAC,EAAE,KAAK,SAC/D,yBAAyB,MAAM,YAAY,mBAAmB,CAChE;CACA,MAAM,MAAM,qBAAqB,YAAY,KAAK,YAAY,mBAAmB;CACjF,MAAM,MAAM,MAAM,0BAA0B,IAAI,YAAY,KAAK,YAAY,qBAAqB,OAAO;CACzG,OAAO,YAAY,MAAM;EAAE;EAAS,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;EAAI;EAAK;CAAI,CAAC;AAC3E;;AAGA,eAAe,2BAA2B,IAAgB,WAAmB,SAAmC;CAC9G,MAAM,OAAO,MAAM,GAAG,SAAS,WAAW,OAAO;CACjD,IAAI,KAAK,IACH;MAAA,KAAK,MAAM,SAAS,aAAa,MAAM,IAAI,MAAM,8CAA8C;CAAA,OAC9F,IAAI,KAAK,MAAM,SAAS,aAC7B,WAAW,MAAM,GAAG,UAAU,WAAW,EAAE,WAAW,KAAK,GAAG,OAAO,CAAC;MAEtE,MAAM,KAAK;CAEb,MAAM,SAAS,QAAQ,WAAA,GAAiC;CACxD,OAAO,WAAW,MAAM,GAAG,cAAc,WAAW,OAAO,CAAC;AAC9D;;;;;AAMA,eAAe,0BACb,IACA,QACA,UACA,kBACA,SACe;CACf,WAAW,MAAM,GAAG,UAAU,kBAAkB,EAAE,WAAW,KAAK,GAAG,OAAO,CAAC;CAC7E,MAAM,SAAS,QAAQ,kBAAA,GAAwC;CAC/D,MAAM,gBAAgB,IAAI,QAAQ,UAAU,OAAO;CACnD,MAAM,SAAS,QAAQ,QAAA,GAAyB;AAClD;;;;;;;;;;AAWA,eAAsB,mCACpB,IACA,QACA,SACA,SACyC;CACzC,MAAM,QAAQ,YAAY,MAAM;CAChC,IAAI;EACF,uBAAuB,MAAM;EAC7B,MAAM,aAAa,WAAW,MAAM,GAAG,cAAc,OAAO,YAAY,OAAO,CAAC;EAChF,MAAM,sBAAsB,MAAM,2BAA2B,IAAI,OAAO,qBAAqB,OAAO;EACpG,MAAM,aAAa,MAAM,kBAAkB,IAAI,YAAY,OAAO,YAAY,YAAY,OAAO;EACjG,qBAAqB,YAAY,UAAU;EAG3C,MAAM,UAAU,iBAAiB,QADnB,WAAW,MAAM,GAAG,eAAe,YAAY,OAAO,CAC3B,GAAO,KAAK;EACrD,MAAM,kBAAkB,OAAO,OAAO,IAAI;EAC1C,MAAM,gBAAgB,OAAO,OAAO,IAAI;EACxC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAE/B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,OAAO,GAAG;GACvD,MAAM,cAAc,kBAAkB,MAAM,OAAO;GACnD,IAAI,gBAAgB,SAAS;IAC3B,YAAY,KAAK,sBAAsB,KAAK,CAAC;IAC7C;GACF;GACA,IAAI,gBAAgB,WAAW;IAC7B,eAAe,KAAK,IAAI;IACxB;GACF;GACA,IAAI;IACF,MAAM,aAAa,MAAM,gBAAgB,IAAI,WAAW,YAAY,qBAAqB,MAAM,OAAO;IACtG,gBAAgB,QAAQ,WAAW;IACnC,cAAc,QAAQ,WAAW;GACnC,SAAS,OAAO;IACd,eAAe,KAAK,IAAI;IACxB,YAAY,KAAK,wBAAwB,OAAO,MAAM,KAAK,CAAC;GAC9D;EACF;EAEA,MAAM,WAAW,eAAe,eAAe;EAC/C,MAAM,SAAS,mBAAmB,QAAQ,UAAU,QAAQ,gBAAgB;EAC5E,MAAM,0BAA0B,IAAI,QAAQ,UAAU,QAAQ,kBAAkB,OAAO;EACvF,OAAO;GACL,cAAc;IAAE,MAAM;IAAQ,QAAQ;IAAY,UAAU,eAAe,QAAQ,YAAY,QAAQ;GAAE;GACzG,cAAc,EAAE,YAAY,cAAc;GAC1C,aAAa,OAAO,KAAK,eAAe;GACxC;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO,eAAe,OAAO,KAAK;CACpC;AACF"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"apiContracts.cjs","names":["Type","jsonApiResponses","defineApiContract"],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses, type
|
|
1
|
+
{"version":3,"file":"apiContracts.cjs","names":["Type","jsonApiResponses","defineApiContract"],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses, type PoHttpContract } from '@agimon-ai/po-core/apiContracts';\nimport { Type } from 'typebox';\n\nconst Text = Type.String();\nconst Optional = Type.Optional;\nconst Strings = Type.Array(Text);\nconst NullableText = Type.Union([Text, Type.Null()]);\nconst Scope = Type.Union([Type.Literal('global'), Type.Literal('repository')]);\nconst Origin = Type.Union([Type.Literal('global'), Type.Literal('repository'), Type.Literal('default')]);\nexport const SettingsConfigSchema = Type.Object({\n repoRoot: Text,\n hashes: Type.Object({ global: Text, repository: Text }),\n values: Type.Record(\n Text,\n Type.Object({\n value: Optional(Text),\n origin: Origin,\n scope: Type.Union([Scope, Type.Literal('both')]),\n }),\n ),\n});\nconst SettingsEditSchema = Type.Object({ keyPath: Strings, value: Type.Union([Text, Type.Number(), Type.Null()]) });\nexport const SettingsWriteSchema = Type.Union([\n Type.Object({ repoRoot: Text, scope: Scope, ...SettingsEditSchema.properties, expectedHash: Text }),\n Type.Object({\n repoRoot: Text,\n scope: Scope,\n edits: Type.Array(SettingsEditSchema, { minItems: 1, maxItems: 100 }),\n expectedHash: Text,\n }),\n]);\n\nconst Repository = Type.Object({ id: Text, name: Text, path: Text, active: Type.Boolean() });\nconst Catalog = Type.Array(\n Type.Object({ name: Text, description: Optional(Text), expandsTo: Optional(Strings), layers: Optional(Strings) }),\n);\nconst SelectionText = Type.Object({ effective: Optional(Text), repository: Optional(Text), origin: Origin });\nconst SelectionStrings = Type.Object({ effective: Optional(Strings), repository: Optional(Strings), origin: Origin });\nexport const RepositorySettingsSchema = Type.Object({\n repository: Repository,\n hash: Text,\n catalogs: Type.Object({ majorModes: Catalog, domains: Catalog, profiles: Catalog }),\n selection: Type.Object({ majorMode: SelectionText, domains: SelectionStrings, profile: SelectionText }),\n});\nexport const RepositorySelectionWriteSchema = Type.Object({\n repositoryId: Text,\n expectedHash: Text,\n changes: Type.Object({\n majorMode: Optional(NullableText),\n domains: Optional(Type.Union([Strings, Type.Null()])),\n profile: Optional(NullableText),\n }),\n});\nconst Images = Type.Object({\n autoResize: Type.Boolean(),\n maxDimension: Type.Number(),\n minDimension: Type.Number(),\n maxAllowedDimension: Type.Number(),\n});\nconst http: PoHttpContract[] = (['global', 'workspace'] as const).flatMap((scope) => {\n const common = { scope, basePath: 'settings', authentication: 'owner' as const };\n return [\n {\n ...common,\n id: 'config',\n path: '/',\n method: 'GET',\n description: 'Read selected settings keys and file hashes.',\n parameters: [{ name: 'key', in: 'query', required: false, schema: Strings }],\n responses: jsonApiResponses(SettingsConfigSchema),\n },\n {\n ...common,\n id: 'value',\n path: '/value',\n method: 'PUT',\n description: 'Write a setting with an optimistic file hash.',\n body: { contentType: 'application/json', required: true, schema: SettingsWriteSchema },\n responses: jsonApiResponses(SettingsConfigSchema),\n },\n {\n ...common,\n id: 'repositories',\n path: '/repositories',\n method: 'GET',\n description: 'List admitted repositories.',\n responses: jsonApiResponses(Type.Object({ repositories: Type.Array(Repository) })),\n },\n {\n ...common,\n id: 'repository',\n path: '/repository',\n method: 'GET',\n description: 'Read the mounted workspace catalog and selection.',\n availability: 'Requires a workspace mount; global returns 404.',\n responses: jsonApiResponses(RepositorySettingsSchema),\n },\n {\n ...common,\n id: 'selection',\n path: '/repository/selection',\n method: 'PUT',\n description: 'Update the mounted workspace selection.',\n availability: 'Requires a workspace mount; global returns 404.',\n body: { contentType: 'application/json', required: true, schema: RepositorySelectionWriteSchema },\n responses: jsonApiResponses(RepositorySettingsSchema),\n },\n ...(scope === 'global'\n ? [\n {\n ...common,\n id: 'images.get',\n path: '/images',\n method: 'GET' as const,\n description: 'Read image resizing limits.',\n responses: jsonApiResponses(Images),\n },\n {\n ...common,\n id: 'images.put',\n path: '/images',\n method: 'PUT' as const,\n description: 'Update image resizing settings; dimensions are clamped.',\n body: {\n contentType: 'application/json',\n required: true,\n schema: Type.Object({ autoResize: Optional(Type.Boolean()), maxDimension: Optional(Type.Number()) }),\n },\n responses: jsonApiResponses(Images),\n },\n ]\n : []),\n ] satisfies PoHttpContract[];\n});\nexport const apiContracts = defineApiContract({ version: 1, http, sockets: [], dynamic: [] });\nexport default apiContracts;\n"],"mappings":";;;;;;;AAGA,MAAM,OAAOA,QAAAA,KAAK,OAAO;AACzB,MAAM,WAAWA,QAAAA,KAAK;AACtB,MAAM,UAAUA,QAAAA,KAAK,MAAM,IAAI;AAC/B,MAAM,eAAeA,QAAAA,KAAK,MAAM,CAAC,MAAMA,QAAAA,KAAK,KAAK,CAAC,CAAC;AACnD,MAAM,QAAQA,QAAAA,KAAK,MAAM,CAACA,QAAAA,KAAK,QAAQ,QAAQ,GAAGA,QAAAA,KAAK,QAAQ,YAAY,CAAC,CAAC;AAC7E,MAAM,SAASA,QAAAA,KAAK,MAAM;CAACA,QAAAA,KAAK,QAAQ,QAAQ;CAAGA,QAAAA,KAAK,QAAQ,YAAY;CAAGA,QAAAA,KAAK,QAAQ,SAAS;AAAC,CAAC;AACvG,MAAa,uBAAuBA,QAAAA,KAAK,OAAO;CAC9C,UAAU;CACV,QAAQA,QAAAA,KAAK,OAAO;EAAE,QAAQ;EAAM,YAAY;CAAK,CAAC;CACtD,QAAQA,QAAAA,KAAK,OACX,MACAA,QAAAA,KAAK,OAAO;EACV,OAAO,SAAS,IAAI;EACpB,QAAQ;EACR,OAAOA,QAAAA,KAAK,MAAM,CAAC,OAAOA,QAAAA,KAAK,QAAQ,MAAM,CAAC,CAAC;CACjD,CAAC,CACH;AACF,CAAC;AACD,MAAM,qBAAqBA,QAAAA,KAAK,OAAO;CAAE,SAAS;CAAS,OAAOA,QAAAA,KAAK,MAAM;EAAC;EAAMA,QAAAA,KAAK,OAAO;EAAGA,QAAAA,KAAK,KAAK;CAAC,CAAC;AAAE,CAAC;AAClH,MAAa,sBAAsBA,QAAAA,KAAK,MAAM,CAC5CA,QAAAA,KAAK,OAAO;CAAE,UAAU;CAAM,OAAO;CAAO,GAAG,mBAAmB;CAAY,cAAc;AAAK,CAAC,GAClGA,QAAAA,KAAK,OAAO;CACV,UAAU;CACV,OAAO;CACP,OAAOA,QAAAA,KAAK,MAAM,oBAAoB;EAAE,UAAU;EAAG,UAAU;CAAI,CAAC;CACpE,cAAc;AAChB,CAAC,CACH,CAAC;AAED,MAAM,aAAaA,QAAAA,KAAK,OAAO;CAAE,IAAI;CAAM,MAAM;CAAM,MAAM;CAAM,QAAQA,QAAAA,KAAK,QAAQ;AAAE,CAAC;AAC3F,MAAM,UAAUA,QAAAA,KAAK,MACnBA,QAAAA,KAAK,OAAO;CAAE,MAAM;CAAM,aAAa,SAAS,IAAI;CAAG,WAAW,SAAS,OAAO;CAAG,QAAQ,SAAS,OAAO;AAAE,CAAC,CAClH;AACA,MAAM,gBAAgBA,QAAAA,KAAK,OAAO;CAAE,WAAW,SAAS,IAAI;CAAG,YAAY,SAAS,IAAI;CAAG,QAAQ;AAAO,CAAC;AAC3G,MAAM,mBAAmBA,QAAAA,KAAK,OAAO;CAAE,WAAW,SAAS,OAAO;CAAG,YAAY,SAAS,OAAO;CAAG,QAAQ;AAAO,CAAC;AACpH,MAAa,2BAA2BA,QAAAA,KAAK,OAAO;CAClD,YAAY;CACZ,MAAM;CACN,UAAUA,QAAAA,KAAK,OAAO;EAAE,YAAY;EAAS,SAAS;EAAS,UAAU;CAAQ,CAAC;CAClF,WAAWA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAe,SAAS;EAAkB,SAAS;CAAc,CAAC;AACxG,CAAC;AACD,MAAa,iCAAiCA,QAAAA,KAAK,OAAO;CACxD,cAAc;CACd,cAAc;CACd,SAASA,QAAAA,KAAK,OAAO;EACnB,WAAW,SAAS,YAAY;EAChC,SAAS,SAASA,QAAAA,KAAK,MAAM,CAAC,SAASA,QAAAA,KAAK,KAAK,CAAC,CAAC,CAAC;EACpD,SAAS,SAAS,YAAY;CAChC,CAAC;AACH,CAAC;AACD,MAAM,SAASA,QAAAA,KAAK,OAAO;CACzB,YAAYA,QAAAA,KAAK,QAAQ;CACzB,cAAcA,QAAAA,KAAK,OAAO;CAC1B,cAAcA,QAAAA,KAAK,OAAO;CAC1B,qBAAqBA,QAAAA,KAAK,OAAO;AACnC,CAAC;AACD,MAAM,OAA0B,CAAC,UAAU,WAAW,CAAC,CAAW,SAAS,UAAU;CACnF,MAAM,SAAS;EAAE;EAAO,UAAU;EAAY,gBAAgB;CAAiB;CAC/E,OAAO;EACL;GACE,GAAG;GACH,IAAI;GACJ,MAAM;GACN,QAAQ;GACR,aAAa;GACb,YAAY,CAAC;IAAE,MAAM;IAAO,IAAI;IAAS,UAAU;IAAO,QAAQ;GAAQ,CAAC;GAC3E,YAAA,GAAWC,gCAAAA,iBAAAA,CAAiB,oBAAoB;EAClD;EACA;GACE,GAAG;GACH,IAAI;GACJ,MAAM;GACN,QAAQ;GACR,aAAa;GACb,MAAM;IAAE,aAAa;IAAoB,UAAU;IAAM,QAAQ;GAAoB;GACrF,YAAA,GAAWA,gCAAAA,iBAAAA,CAAiB,oBAAoB;EAClD;EACA;GACE,GAAG;GACH,IAAI;GACJ,MAAM;GACN,QAAQ;GACR,aAAa;GACb,YAAA,GAAWA,gCAAAA,iBAAAA,CAAiBD,QAAAA,KAAK,OAAO,EAAE,cAAcA,QAAAA,KAAK,MAAM,UAAU,EAAE,CAAC,CAAC;EACnF;EACA;GACE,GAAG;GACH,IAAI;GACJ,MAAM;GACN,QAAQ;GACR,aAAa;GACb,cAAc;GACd,YAAA,GAAWC,gCAAAA,iBAAAA,CAAiB,wBAAwB;EACtD;EACA;GACE,GAAG;GACH,IAAI;GACJ,MAAM;GACN,QAAQ;GACR,aAAa;GACb,cAAc;GACd,MAAM;IAAE,aAAa;IAAoB,UAAU;IAAM,QAAQ;GAA+B;GAChG,YAAA,GAAWA,gCAAAA,iBAAAA,CAAiB,wBAAwB;EACtD;EACA,GAAI,UAAU,WACV,CACE;GACE,GAAG;GACH,IAAI;GACJ,MAAM;GACN,QAAQ;GACR,aAAa;GACb,YAAA,GAAWA,gCAAAA,iBAAAA,CAAiB,MAAM;EACpC,GACA;GACE,GAAG;GACH,IAAI;GACJ,MAAM;GACN,QAAQ;GACR,aAAa;GACb,MAAM;IACJ,aAAa;IACb,UAAU;IACV,QAAQD,QAAAA,KAAK,OAAO;KAAE,YAAY,SAASA,QAAAA,KAAK,QAAQ,CAAC;KAAG,cAAc,SAASA,QAAAA,KAAK,OAAO,CAAC;IAAE,CAAC;GACrG;GACA,YAAA,GAAWC,gCAAAA,iBAAAA,CAAiB,MAAM;EACpC,CACF,IACA,CAAC;CACP;AACF,CAAC;AACD,MAAa,gBAAA,GAAeC,gCAAAA,kBAAAA,CAAkB;CAAE,SAAS;CAAG;CAAM,SAAS,CAAC;CAAG,SAAS,CAAC;AAAE,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"apiContracts.mjs","names":[],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses, type
|
|
1
|
+
{"version":3,"file":"apiContracts.mjs","names":[],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses, type PoHttpContract } from '@agimon-ai/po-core/apiContracts';\nimport { Type } from 'typebox';\n\nconst Text = Type.String();\nconst Optional = Type.Optional;\nconst Strings = Type.Array(Text);\nconst NullableText = Type.Union([Text, Type.Null()]);\nconst Scope = Type.Union([Type.Literal('global'), Type.Literal('repository')]);\nconst Origin = Type.Union([Type.Literal('global'), Type.Literal('repository'), Type.Literal('default')]);\nexport const SettingsConfigSchema = Type.Object({\n repoRoot: Text,\n hashes: Type.Object({ global: Text, repository: Text }),\n values: Type.Record(\n Text,\n Type.Object({\n value: Optional(Text),\n origin: Origin,\n scope: Type.Union([Scope, Type.Literal('both')]),\n }),\n ),\n});\nconst SettingsEditSchema = Type.Object({ keyPath: Strings, value: Type.Union([Text, Type.Number(), Type.Null()]) });\nexport const SettingsWriteSchema = Type.Union([\n Type.Object({ repoRoot: Text, scope: Scope, ...SettingsEditSchema.properties, expectedHash: Text }),\n Type.Object({\n repoRoot: Text,\n scope: Scope,\n edits: Type.Array(SettingsEditSchema, { minItems: 1, maxItems: 100 }),\n expectedHash: Text,\n }),\n]);\n\nconst Repository = Type.Object({ id: Text, name: Text, path: Text, active: Type.Boolean() });\nconst Catalog = Type.Array(\n Type.Object({ name: Text, description: Optional(Text), expandsTo: Optional(Strings), layers: Optional(Strings) }),\n);\nconst SelectionText = Type.Object({ effective: Optional(Text), repository: Optional(Text), origin: Origin });\nconst SelectionStrings = Type.Object({ effective: Optional(Strings), repository: Optional(Strings), origin: Origin });\nexport const RepositorySettingsSchema = Type.Object({\n repository: Repository,\n hash: Text,\n catalogs: Type.Object({ majorModes: Catalog, domains: Catalog, profiles: Catalog }),\n selection: Type.Object({ majorMode: SelectionText, domains: SelectionStrings, profile: SelectionText }),\n});\nexport const RepositorySelectionWriteSchema = Type.Object({\n repositoryId: Text,\n expectedHash: Text,\n changes: Type.Object({\n majorMode: Optional(NullableText),\n domains: Optional(Type.Union([Strings, Type.Null()])),\n profile: Optional(NullableText),\n }),\n});\nconst Images = Type.Object({\n autoResize: Type.Boolean(),\n maxDimension: Type.Number(),\n minDimension: Type.Number(),\n maxAllowedDimension: Type.Number(),\n});\nconst http: PoHttpContract[] = (['global', 'workspace'] as const).flatMap((scope) => {\n const common = { scope, basePath: 'settings', authentication: 'owner' as const };\n return [\n {\n ...common,\n id: 'config',\n path: '/',\n method: 'GET',\n description: 'Read selected settings keys and file hashes.',\n parameters: [{ name: 'key', in: 'query', required: false, schema: Strings }],\n responses: jsonApiResponses(SettingsConfigSchema),\n },\n {\n ...common,\n id: 'value',\n path: '/value',\n method: 'PUT',\n description: 'Write a setting with an optimistic file hash.',\n body: { contentType: 'application/json', required: true, schema: SettingsWriteSchema },\n responses: jsonApiResponses(SettingsConfigSchema),\n },\n {\n ...common,\n id: 'repositories',\n path: '/repositories',\n method: 'GET',\n description: 'List admitted repositories.',\n responses: jsonApiResponses(Type.Object({ repositories: Type.Array(Repository) })),\n },\n {\n ...common,\n id: 'repository',\n path: '/repository',\n method: 'GET',\n description: 'Read the mounted workspace catalog and selection.',\n availability: 'Requires a workspace mount; global returns 404.',\n responses: jsonApiResponses(RepositorySettingsSchema),\n },\n {\n ...common,\n id: 'selection',\n path: '/repository/selection',\n method: 'PUT',\n description: 'Update the mounted workspace selection.',\n availability: 'Requires a workspace mount; global returns 404.',\n body: { contentType: 'application/json', required: true, schema: RepositorySelectionWriteSchema },\n responses: jsonApiResponses(RepositorySettingsSchema),\n },\n ...(scope === 'global'\n ? [\n {\n ...common,\n id: 'images.get',\n path: '/images',\n method: 'GET' as const,\n description: 'Read image resizing limits.',\n responses: jsonApiResponses(Images),\n },\n {\n ...common,\n id: 'images.put',\n path: '/images',\n method: 'PUT' as const,\n description: 'Update image resizing settings; dimensions are clamped.',\n body: {\n contentType: 'application/json',\n required: true,\n schema: Type.Object({ autoResize: Optional(Type.Boolean()), maxDimension: Optional(Type.Number()) }),\n },\n responses: jsonApiResponses(Images),\n },\n ]\n : []),\n ] satisfies PoHttpContract[];\n});\nexport const apiContracts = defineApiContract({ version: 1, http, sockets: [], dynamic: [] });\nexport default apiContracts;\n"],"mappings":";;;AAGA,MAAM,OAAO,KAAK,OAAO;AACzB,MAAM,WAAW,KAAK;AACtB,MAAM,UAAU,KAAK,MAAM,IAAI;AAC/B,MAAM,eAAe,KAAK,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;AACnD,MAAM,QAAQ,KAAK,MAAM,CAAC,KAAK,QAAQ,QAAQ,GAAG,KAAK,QAAQ,YAAY,CAAC,CAAC;AAC7E,MAAM,SAAS,KAAK,MAAM;CAAC,KAAK,QAAQ,QAAQ;CAAG,KAAK,QAAQ,YAAY;CAAG,KAAK,QAAQ,SAAS;AAAC,CAAC;AACvG,MAAa,uBAAuB,KAAK,OAAO;CAC9C,UAAU;CACV,QAAQ,KAAK,OAAO;EAAE,QAAQ;EAAM,YAAY;CAAK,CAAC;CACtD,QAAQ,KAAK,OACX,MACA,KAAK,OAAO;EACV,OAAO,SAAS,IAAI;EACpB,QAAQ;EACR,OAAO,KAAK,MAAM,CAAC,OAAO,KAAK,QAAQ,MAAM,CAAC,CAAC;CACjD,CAAC,CACH;AACF,CAAC;AACD,MAAM,qBAAqB,KAAK,OAAO;CAAE,SAAS;CAAS,OAAO,KAAK,MAAM;EAAC;EAAM,KAAK,OAAO;EAAG,KAAK,KAAK;CAAC,CAAC;AAAE,CAAC;AAClH,MAAa,sBAAsB,KAAK,MAAM,CAC5C,KAAK,OAAO;CAAE,UAAU;CAAM,OAAO;CAAO,GAAG,mBAAmB;CAAY,cAAc;AAAK,CAAC,GAClG,KAAK,OAAO;CACV,UAAU;CACV,OAAO;CACP,OAAO,KAAK,MAAM,oBAAoB;EAAE,UAAU;EAAG,UAAU;CAAI,CAAC;CACpE,cAAc;AAChB,CAAC,CACH,CAAC;AAED,MAAM,aAAa,KAAK,OAAO;CAAE,IAAI;CAAM,MAAM;CAAM,MAAM;CAAM,QAAQ,KAAK,QAAQ;AAAE,CAAC;AAC3F,MAAM,UAAU,KAAK,MACnB,KAAK,OAAO;CAAE,MAAM;CAAM,aAAa,SAAS,IAAI;CAAG,WAAW,SAAS,OAAO;CAAG,QAAQ,SAAS,OAAO;AAAE,CAAC,CAClH;AACA,MAAM,gBAAgB,KAAK,OAAO;CAAE,WAAW,SAAS,IAAI;CAAG,YAAY,SAAS,IAAI;CAAG,QAAQ;AAAO,CAAC;AAC3G,MAAM,mBAAmB,KAAK,OAAO;CAAE,WAAW,SAAS,OAAO;CAAG,YAAY,SAAS,OAAO;CAAG,QAAQ;AAAO,CAAC;AACpH,MAAa,2BAA2B,KAAK,OAAO;CAClD,YAAY;CACZ,MAAM;CACN,UAAU,KAAK,OAAO;EAAE,YAAY;EAAS,SAAS;EAAS,UAAU;CAAQ,CAAC;CAClF,WAAW,KAAK,OAAO;EAAE,WAAW;EAAe,SAAS;EAAkB,SAAS;CAAc,CAAC;AACxG,CAAC;AACD,MAAa,iCAAiC,KAAK,OAAO;CACxD,cAAc;CACd,cAAc;CACd,SAAS,KAAK,OAAO;EACnB,WAAW,SAAS,YAAY;EAChC,SAAS,SAAS,KAAK,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC;EACpD,SAAS,SAAS,YAAY;CAChC,CAAC;AACH,CAAC;AACD,MAAM,SAAS,KAAK,OAAO;CACzB,YAAY,KAAK,QAAQ;CACzB,cAAc,KAAK,OAAO;CAC1B,cAAc,KAAK,OAAO;CAC1B,qBAAqB,KAAK,OAAO;AACnC,CAAC;AACD,MAAM,OAA0B,CAAC,UAAU,WAAW,CAAC,CAAW,SAAS,UAAU;CACnF,MAAM,SAAS;EAAE;EAAO,UAAU;EAAY,gBAAgB;CAAiB;CAC/E,OAAO;EACL;GACE,GAAG;GACH,IAAI;GACJ,MAAM;GACN,QAAQ;GACR,aAAa;GACb,YAAY,CAAC;IAAE,MAAM;IAAO,IAAI;IAAS,UAAU;IAAO,QAAQ;GAAQ,CAAC;GAC3E,WAAW,iBAAiB,oBAAoB;EAClD;EACA;GACE,GAAG;GACH,IAAI;GACJ,MAAM;GACN,QAAQ;GACR,aAAa;GACb,MAAM;IAAE,aAAa;IAAoB,UAAU;IAAM,QAAQ;GAAoB;GACrF,WAAW,iBAAiB,oBAAoB;EAClD;EACA;GACE,GAAG;GACH,IAAI;GACJ,MAAM;GACN,QAAQ;GACR,aAAa;GACb,WAAW,iBAAiB,KAAK,OAAO,EAAE,cAAc,KAAK,MAAM,UAAU,EAAE,CAAC,CAAC;EACnF;EACA;GACE,GAAG;GACH,IAAI;GACJ,MAAM;GACN,QAAQ;GACR,aAAa;GACb,cAAc;GACd,WAAW,iBAAiB,wBAAwB;EACtD;EACA;GACE,GAAG;GACH,IAAI;GACJ,MAAM;GACN,QAAQ;GACR,aAAa;GACb,cAAc;GACd,MAAM;IAAE,aAAa;IAAoB,UAAU;IAAM,QAAQ;GAA+B;GAChG,WAAW,iBAAiB,wBAAwB;EACtD;EACA,GAAI,UAAU,WACV,CACE;GACE,GAAG;GACH,IAAI;GACJ,MAAM;GACN,QAAQ;GACR,aAAa;GACb,WAAW,iBAAiB,MAAM;EACpC,GACA;GACE,GAAG;GACH,IAAI;GACJ,MAAM;GACN,QAAQ;GACR,aAAa;GACb,MAAM;IACJ,aAAa;IACb,UAAU;IACV,QAAQ,KAAK,OAAO;KAAE,YAAY,SAAS,KAAK,QAAQ,CAAC;KAAG,cAAc,SAAS,KAAK,OAAO,CAAC;IAAE,CAAC;GACrG;GACA,WAAW,iBAAiB,MAAM;EACpC,CACF,IACA,CAAC;CACP;AACF,CAAC;AACD,MAAa,eAAe,kBAAkB;CAAE,SAAS;CAAG;CAAM,SAAS,CAAC;CAAG,SAAS,CAAC;AAAE,CAAC"}
|
|
@@ -0,0 +1,59 @@
|
|
|
1
|
+
const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
|
|
2
|
+
let node_path = require("node:path");
|
|
3
|
+
node_path = require_rolldown_runtime.__toESM(node_path, 1);
|
|
4
|
+
let _agimon_ai_po_core_platform = require("@agimon-ai/po-core/platform");
|
|
5
|
+
//#region src/services/atomicJson/format.ts
|
|
6
|
+
/** The on-disk form: two-space indent and a trailing newline. */
|
|
7
|
+
function serializePrivateJson(value) {
|
|
8
|
+
return `${JSON.stringify(value, null, 2)}\n`;
|
|
9
|
+
}
|
|
10
|
+
//#endregion
|
|
11
|
+
//#region src/services/atomicJson/index.ts
|
|
12
|
+
const writes = (0, _agimon_ai_po_core_platform.createSerialRunner)();
|
|
13
|
+
/**
|
|
14
|
+
* Creates a directory and any missing ancestors, giving each directory it
|
|
15
|
+
* creates `mode`, as `mkdir -p -m` does. Existing directories keep their mode.
|
|
16
|
+
*/
|
|
17
|
+
async function createDirectoryWithMode(fs, directory, mode, context) {
|
|
18
|
+
const missing = [];
|
|
19
|
+
let current = node_path.default.resolve(directory);
|
|
20
|
+
while (!(0, _agimon_ai_po_core_platform.getOrThrow)(await fs.exists(current, context))) {
|
|
21
|
+
missing.push(current);
|
|
22
|
+
const parent = node_path.default.dirname(current);
|
|
23
|
+
if (parent === current) break;
|
|
24
|
+
current = parent;
|
|
25
|
+
}
|
|
26
|
+
if (missing.length === 0) return;
|
|
27
|
+
(0, _agimon_ai_po_core_platform.getOrThrow)(await fs.createDir(directory, { recursive: true }, context));
|
|
28
|
+
for (const created of missing.reverse()) await _agimon_ai_po_core_platform.nodeHost.setMode(created, mode);
|
|
29
|
+
}
|
|
30
|
+
/** Writes JSON readable by its owner only, replacing the target atomically. */
|
|
31
|
+
async function writePrivateAtomicJsonAsync(fs, filePath, value, context) {
|
|
32
|
+
const content = serializePrivateJson(value);
|
|
33
|
+
await writes.forKey(node_path.default.resolve(filePath))(async () => {
|
|
34
|
+
await createDirectoryWithMode(fs, node_path.default.dirname(filePath), 448, context);
|
|
35
|
+
await (0, _agimon_ai_po_core_platform.writeFileAtomic)(fs, filePath, content, context);
|
|
36
|
+
await _agimon_ai_po_core_platform.nodeHost.setMode(filePath, 384);
|
|
37
|
+
});
|
|
38
|
+
}
|
|
39
|
+
//#endregion
|
|
40
|
+
Object.defineProperty(exports, "createDirectoryWithMode", {
|
|
41
|
+
enumerable: true,
|
|
42
|
+
get: function() {
|
|
43
|
+
return createDirectoryWithMode;
|
|
44
|
+
}
|
|
45
|
+
});
|
|
46
|
+
Object.defineProperty(exports, "serializePrivateJson", {
|
|
47
|
+
enumerable: true,
|
|
48
|
+
get: function() {
|
|
49
|
+
return serializePrivateJson;
|
|
50
|
+
}
|
|
51
|
+
});
|
|
52
|
+
Object.defineProperty(exports, "writePrivateAtomicJsonAsync", {
|
|
53
|
+
enumerable: true,
|
|
54
|
+
get: function() {
|
|
55
|
+
return writePrivateAtomicJsonAsync;
|
|
56
|
+
}
|
|
57
|
+
});
|
|
58
|
+
|
|
59
|
+
//# sourceMappingURL=atomicJson-D3MHqnLW.cjs.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"atomicJson-D3MHqnLW.cjs","names":["createSerialRunner","path","getOrThrow","nodeHost","writeFileAtomic"],"sources":["../src/services/atomicJson/format.ts","../src/services/atomicJson/index.ts"],"sourcesContent":["/** Owner-only modes for private JSON files and the directories created for them. */\nexport const PRIVATE_FILE_MODE = 0o600;\nexport const PRIVATE_DIRECTORY_MODE = 0o700;\n\n/** The on-disk form: two-space indent and a trailing newline. */\nexport function serializePrivateJson(value: unknown): string {\n return `${JSON.stringify(value, null, 2)}\\n`;\n}\n","import path from 'node:path';\n\nimport {\n createSerialRunner,\n getOrThrow,\n nodeHost,\n writeFileAtomic,\n type FileSystem,\n} from '@agimon-ai/po-core/platform';\n\nimport { PRIVATE_DIRECTORY_MODE, PRIVATE_FILE_MODE, serializePrivateJson } from './format';\n\n/**\n * Private atomic JSON writes.\n *\n * Write to a uniquely named temporary file in the destination directory, then\n * rename onto the target. Rename is atomic within a filesystem, so a reader\n * sees either the previous file or the complete new one and never a partial\n * write. The temporary name carries a random UUID, so two writers of the same\n * target cannot collide on it.\n *\n * This prevents torn reads. It does NOT prevent lost updates across processes:\n * two writers doing read-modify-write still clobber each other, because the\n * rename only publishes what the caller already computed. Writes from one\n * process to one path are queued in call order.\n *\n * AVOID:\n * - Treating this as a lock\n * - Leaving the temporary file behind when the write fails\n */\n\ntype IoContext = Parameters<FileSystem['readTextFile']>[1];\n\nconst writes = createSerialRunner();\n\n/**\n * Creates a directory and any missing ancestors, giving each directory it\n * creates `mode`, as `mkdir -p -m` does. Existing directories keep their mode.\n */\nexport async function createDirectoryWithMode(\n fs: FileSystem,\n directory: string,\n mode: number,\n context: IoContext,\n): Promise<void> {\n const missing: string[] = [];\n let current = path.resolve(directory);\n while (!getOrThrow(await fs.exists(current, context))) {\n missing.push(current);\n const parent = path.dirname(current);\n if (parent === current) break;\n current = parent;\n }\n if (missing.length === 0) return;\n getOrThrow(await fs.createDir(directory, { recursive: true }, context));\n for (const created of missing.reverse()) await nodeHost.setMode(created, mode);\n}\n\n/** Writes JSON readable by its owner only, replacing the target atomically. */\nexport async function writePrivateAtomicJsonAsync(\n fs: FileSystem,\n filePath: string,\n value: unknown,\n context: IoContext,\n): Promise<void> {\n const content = serializePrivateJson(value);\n await writes.forKey(path.resolve(filePath))(async () => {\n await createDirectoryWithMode(fs, path.dirname(filePath), PRIVATE_DIRECTORY_MODE, context);\n await writeFileAtomic(fs, filePath, content, context);\n await nodeHost.setMode(filePath, PRIVATE_FILE_MODE);\n });\n}\n\nexport { writePrivateAtomicJson } from './sync';\n"],"mappings":";;;;;;AAKA,SAAgB,qBAAqB,OAAwB;CAC3D,OAAO,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE;AAC3C;;;AC0BA,MAAM,UAAA,GAASA,4BAAAA,mBAAAA,CAAmB;;;;;AAMlC,eAAsB,wBACpB,IACA,WACA,MACA,SACe;CACf,MAAM,UAAoB,CAAC;CAC3B,IAAI,UAAUC,UAAAA,QAAK,QAAQ,SAAS;CACpC,OAAO,EAAA,GAACC,4BAAAA,WAAAA,CAAW,MAAM,GAAG,OAAO,SAAS,OAAO,CAAC,GAAG;EACrD,QAAQ,KAAK,OAAO;EACpB,MAAM,SAASD,UAAAA,QAAK,QAAQ,OAAO;EACnC,IAAI,WAAW,SAAS;EACxB,UAAU;CACZ;CACA,IAAI,QAAQ,WAAW,GAAG;CAC1B,CAAA,GAAA,4BAAA,WAAA,CAAW,MAAM,GAAG,UAAU,WAAW,EAAE,WAAW,KAAK,GAAG,OAAO,CAAC;CACtE,KAAK,MAAM,WAAW,QAAQ,QAAQ,GAAG,MAAME,4BAAAA,SAAS,QAAQ,SAAS,IAAI;AAC/E;;AAGA,eAAsB,4BACpB,IACA,UACA,OACA,SACe;CACf,MAAM,UAAU,qBAAqB,KAAK;CAC1C,MAAM,OAAO,OAAOF,UAAAA,QAAK,QAAQ,QAAQ,CAAC,CAAC,CAAC,YAAY;EACtD,MAAM,wBAAwB,IAAIA,UAAAA,QAAK,QAAQ,QAAQ,GAAA,KAA2B,OAAO;EACzF,OAAA,GAAMG,4BAAAA,gBAAAA,CAAgB,IAAI,UAAU,SAAS,OAAO;EACpD,MAAMD,4BAAAA,SAAS,QAAQ,UAAA,GAA2B;CACpD,CAAC;AACH"}
|
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
import path from "node:path";
|
|
2
|
+
import { createSerialRunner, getOrThrow, nodeHost, writeFileAtomic } from "@agimon-ai/po-core/platform";
|
|
3
|
+
//#region src/services/atomicJson/format.ts
|
|
4
|
+
/** The on-disk form: two-space indent and a trailing newline. */
|
|
5
|
+
function serializePrivateJson(value) {
|
|
6
|
+
return `${JSON.stringify(value, null, 2)}\n`;
|
|
7
|
+
}
|
|
8
|
+
//#endregion
|
|
9
|
+
//#region src/services/atomicJson/index.ts
|
|
10
|
+
const writes = createSerialRunner();
|
|
11
|
+
/**
|
|
12
|
+
* Creates a directory and any missing ancestors, giving each directory it
|
|
13
|
+
* creates `mode`, as `mkdir -p -m` does. Existing directories keep their mode.
|
|
14
|
+
*/
|
|
15
|
+
async function createDirectoryWithMode(fs, directory, mode, context) {
|
|
16
|
+
const missing = [];
|
|
17
|
+
let current = path.resolve(directory);
|
|
18
|
+
while (!getOrThrow(await fs.exists(current, context))) {
|
|
19
|
+
missing.push(current);
|
|
20
|
+
const parent = path.dirname(current);
|
|
21
|
+
if (parent === current) break;
|
|
22
|
+
current = parent;
|
|
23
|
+
}
|
|
24
|
+
if (missing.length === 0) return;
|
|
25
|
+
getOrThrow(await fs.createDir(directory, { recursive: true }, context));
|
|
26
|
+
for (const created of missing.reverse()) await nodeHost.setMode(created, mode);
|
|
27
|
+
}
|
|
28
|
+
/** Writes JSON readable by its owner only, replacing the target atomically. */
|
|
29
|
+
async function writePrivateAtomicJsonAsync(fs, filePath, value, context) {
|
|
30
|
+
const content = serializePrivateJson(value);
|
|
31
|
+
await writes.forKey(path.resolve(filePath))(async () => {
|
|
32
|
+
await createDirectoryWithMode(fs, path.dirname(filePath), 448, context);
|
|
33
|
+
await writeFileAtomic(fs, filePath, content, context);
|
|
34
|
+
await nodeHost.setMode(filePath, 384);
|
|
35
|
+
});
|
|
36
|
+
}
|
|
37
|
+
//#endregion
|
|
38
|
+
export { writePrivateAtomicJsonAsync as n, serializePrivateJson as r, createDirectoryWithMode as t };
|
|
39
|
+
|
|
40
|
+
//# sourceMappingURL=atomicJson-Dj3rlZbD.mjs.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"atomicJson-Dj3rlZbD.mjs","names":[],"sources":["../src/services/atomicJson/format.ts","../src/services/atomicJson/index.ts"],"sourcesContent":["/** Owner-only modes for private JSON files and the directories created for them. */\nexport const PRIVATE_FILE_MODE = 0o600;\nexport const PRIVATE_DIRECTORY_MODE = 0o700;\n\n/** The on-disk form: two-space indent and a trailing newline. */\nexport function serializePrivateJson(value: unknown): string {\n return `${JSON.stringify(value, null, 2)}\\n`;\n}\n","import path from 'node:path';\n\nimport {\n createSerialRunner,\n getOrThrow,\n nodeHost,\n writeFileAtomic,\n type FileSystem,\n} from '@agimon-ai/po-core/platform';\n\nimport { PRIVATE_DIRECTORY_MODE, PRIVATE_FILE_MODE, serializePrivateJson } from './format';\n\n/**\n * Private atomic JSON writes.\n *\n * Write to a uniquely named temporary file in the destination directory, then\n * rename onto the target. Rename is atomic within a filesystem, so a reader\n * sees either the previous file or the complete new one and never a partial\n * write. The temporary name carries a random UUID, so two writers of the same\n * target cannot collide on it.\n *\n * This prevents torn reads. It does NOT prevent lost updates across processes:\n * two writers doing read-modify-write still clobber each other, because the\n * rename only publishes what the caller already computed. Writes from one\n * process to one path are queued in call order.\n *\n * AVOID:\n * - Treating this as a lock\n * - Leaving the temporary file behind when the write fails\n */\n\ntype IoContext = Parameters<FileSystem['readTextFile']>[1];\n\nconst writes = createSerialRunner();\n\n/**\n * Creates a directory and any missing ancestors, giving each directory it\n * creates `mode`, as `mkdir -p -m` does. Existing directories keep their mode.\n */\nexport async function createDirectoryWithMode(\n fs: FileSystem,\n directory: string,\n mode: number,\n context: IoContext,\n): Promise<void> {\n const missing: string[] = [];\n let current = path.resolve(directory);\n while (!getOrThrow(await fs.exists(current, context))) {\n missing.push(current);\n const parent = path.dirname(current);\n if (parent === current) break;\n current = parent;\n }\n if (missing.length === 0) return;\n getOrThrow(await fs.createDir(directory, { recursive: true }, context));\n for (const created of missing.reverse()) await nodeHost.setMode(created, mode);\n}\n\n/** Writes JSON readable by its owner only, replacing the target atomically. */\nexport async function writePrivateAtomicJsonAsync(\n fs: FileSystem,\n filePath: string,\n value: unknown,\n context: IoContext,\n): Promise<void> {\n const content = serializePrivateJson(value);\n await writes.forKey(path.resolve(filePath))(async () => {\n await createDirectoryWithMode(fs, path.dirname(filePath), PRIVATE_DIRECTORY_MODE, context);\n await writeFileAtomic(fs, filePath, content, context);\n await nodeHost.setMode(filePath, PRIVATE_FILE_MODE);\n });\n}\n\nexport { writePrivateAtomicJson } from './sync';\n"],"mappings":";;;;AAKA,SAAgB,qBAAqB,OAAwB;CAC3D,OAAO,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE;AAC3C;;;AC0BA,MAAM,SAAS,mBAAmB;;;;;AAMlC,eAAsB,wBACpB,IACA,WACA,MACA,SACe;CACf,MAAM,UAAoB,CAAC;CAC3B,IAAI,UAAU,KAAK,QAAQ,SAAS;CACpC,OAAO,CAAC,WAAW,MAAM,GAAG,OAAO,SAAS,OAAO,CAAC,GAAG;EACrD,QAAQ,KAAK,OAAO;EACpB,MAAM,SAAS,KAAK,QAAQ,OAAO;EACnC,IAAI,WAAW,SAAS;EACxB,UAAU;CACZ;CACA,IAAI,QAAQ,WAAW,GAAG;CAC1B,WAAW,MAAM,GAAG,UAAU,WAAW,EAAE,WAAW,KAAK,GAAG,OAAO,CAAC;CACtE,KAAK,MAAM,WAAW,QAAQ,QAAQ,GAAG,MAAM,SAAS,QAAQ,SAAS,IAAI;AAC/E;;AAGA,eAAsB,4BACpB,IACA,UACA,OACA,SACe;CACf,MAAM,UAAU,qBAAqB,KAAK;CAC1C,MAAM,OAAO,OAAO,KAAK,QAAQ,QAAQ,CAAC,CAAC,CAAC,YAAY;EACtD,MAAM,wBAAwB,IAAI,KAAK,QAAQ,QAAQ,GAAA,KAA2B,OAAO;EACzF,MAAM,gBAAgB,IAAI,UAAU,SAAS,OAAO;EACpD,MAAM,SAAS,QAAQ,UAAA,GAA2B;CACpD,CAAC;AACH"}
|
package/dist/atomicJson.cjs
CHANGED
|
@@ -1,3 +1,5 @@
|
|
|
1
1
|
Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
|
|
2
|
-
const require_atomicJson = require("./atomicJson-
|
|
3
|
-
|
|
2
|
+
const require_atomicJson = require("./atomicJson-D3MHqnLW.cjs");
|
|
3
|
+
const require_sync = require("./sync-Dlxz2msM.cjs");
|
|
4
|
+
exports.writePrivateAtomicJson = require_sync.writePrivateAtomicJson;
|
|
5
|
+
exports.writePrivateAtomicJsonAsync = require_atomicJson.writePrivateAtomicJsonAsync;
|
package/dist/atomicJson.d.mts
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
import {
|
|
2
|
-
export { writePrivateAtomicJson };
|
|
1
|
+
import { n as writePrivateAtomicJson, t as writePrivateAtomicJsonAsync } from "./index-fTuf8tVH.mjs";
|
|
2
|
+
export { writePrivateAtomicJson, writePrivateAtomicJsonAsync };
|
package/dist/atomicJson.mjs
CHANGED
|
@@ -1,2 +1,3 @@
|
|
|
1
|
-
import {
|
|
2
|
-
|
|
1
|
+
import { n as writePrivateAtomicJsonAsync } from "./atomicJson-Dj3rlZbD.mjs";
|
|
2
|
+
import { t as writePrivateAtomicJson } from "./sync-BJ8gCP9s.mjs";
|
|
3
|
+
export { writePrivateAtomicJson, writePrivateAtomicJsonAsync };
|
|
@@ -1,3 +1,5 @@
|
|
|
1
|
+
import "./index-DNEK9W6n.mjs";
|
|
2
|
+
import { FileSystem } from "@agimon-ai/po-core/platform";
|
|
1
3
|
//#region src/types/domains.d.ts
|
|
2
4
|
interface LocalPluginSource {
|
|
3
5
|
type: 'local';
|
|
@@ -89,36 +91,74 @@ interface PluginEntry {
|
|
|
89
91
|
mcp?: boolean;
|
|
90
92
|
}
|
|
91
93
|
//#endregion
|
|
92
|
-
//#region src/services/
|
|
94
|
+
//#region src/services/pluginCatalog/parse.d.ts
|
|
95
|
+
declare const MARKETPLACE_MANIFEST_RELATIVE_PATHS: readonly ['.agents/plugins/marketplace.json', '.agents/plugins/api_marketplace.json', '.claude-plugin/marketplace.json', '.cursor-plugin/marketplace.json'];
|
|
96
|
+
declare function pluginDirectoryForSource(source: PluginSource, homePoDirectory: string): string;
|
|
97
|
+
declare function isRemotePluginSource(source: PluginSource): source is GitPluginSource | Extract<PluginSource, {
|
|
98
|
+
type: 'npm';
|
|
99
|
+
}>;
|
|
100
|
+
//#endregion
|
|
101
|
+
//#region src/services/pluginCatalog/sync.d.ts
|
|
102
|
+
/**
|
|
103
|
+
* Matches Codex manifest precedence, including schema-gated root plugin.json.
|
|
104
|
+
* @deprecated Node-only sync shim; use findPluginManifestPathAsync. Removed in M2.
|
|
105
|
+
*/
|
|
106
|
+
declare function findPluginManifestPath(pluginRoot: string): string | undefined;
|
|
107
|
+
//#endregion
|
|
108
|
+
//#region src/services/pluginCatalog/index.d.ts
|
|
109
|
+
type Context = Parameters<FileSystem['readTextFile']>[1];
|
|
110
|
+
/** Matches Codex manifest precedence, including schema-gated root plugin.json. */
|
|
111
|
+
declare function findPluginManifestPathAsync(fs: FileSystem, pluginRoot: string, context: Context): Promise<string | undefined>;
|
|
112
|
+
//#endregion
|
|
113
|
+
//#region src/services/domains/core.d.ts
|
|
114
|
+
declare const PO_DOMAINS_ENV = "PO_DOMAINS";
|
|
115
|
+
declare const DEFAULT_DOMAIN = "default";
|
|
116
|
+
/**
|
|
117
|
+
* Domains selected when the caller names none.
|
|
118
|
+
*
|
|
119
|
+
* Configuration keeps this axis independent of the major mode. The
|
|
120
|
+
* major-mode-derived choice is retained only as the compatibility fallback for
|
|
121
|
+
* domains files that declare no defaultDomains.
|
|
122
|
+
*/
|
|
123
|
+
declare function defaultDomainsForMajorMode(majorMode: string, environment: NodeJS.ProcessEnv, defaultDomains?: readonly string[]): string[];
|
|
124
|
+
//#endregion
|
|
125
|
+
//#region src/services/domains/sync.d.ts
|
|
93
126
|
/**
|
|
94
127
|
* Reads domains and plugin catalogs from global and repository configs.
|
|
95
128
|
*
|
|
129
|
+
* @deprecated Node-only sync shim; use loadDomainsAsync. Removed in M2.
|
|
130
|
+
*/
|
|
131
|
+
declare function loadDomains(repoRoot: string, homeDirectory?: string): DomainManifest;
|
|
132
|
+
/** @deprecated Node-only sync shim; use listDomainNamesAsync. Removed in M2. */
|
|
133
|
+
declare function listDomainNames(repoRoot: string, homeDirectory?: string): string[];
|
|
134
|
+
/** @deprecated Node-only sync shim; use resolveSharedSkillsAsync. Removed in M2. */
|
|
135
|
+
declare function resolveSharedSkills(repoRoot: string, domainNames: string[], homeDirectory?: string): boolean;
|
|
136
|
+
/** @deprecated Node-only sync shim; use resolvePluginEntriesAsync. Removed in M2. */
|
|
137
|
+
declare function resolvePluginEntries(repoRoot: string, domainNames: string[], explicitDirectories: string[], homeDirectory?: string): PluginEntry[];
|
|
138
|
+
/** @deprecated Node-only sync shim; use resolvePluginDirectoriesAsync. Removed in M2. */
|
|
139
|
+
declare function resolvePluginDirectories(repoRoot: string, domainNames: string[], explicitDirectories: string[], homeDirectory?: string): string[];
|
|
140
|
+
//#endregion
|
|
141
|
+
//#region src/services/domains/index.d.ts
|
|
142
|
+
type IoContext = Parameters<FileSystem['readTextFile']>[1];
|
|
143
|
+
/**
|
|
144
|
+
* Reads domains and plugin catalogs from global and repository configs over a FileSystem.
|
|
145
|
+
*
|
|
96
146
|
* Named domains and explicit plugin entries are replaced by later repository
|
|
97
147
|
* definitions. Configured roots accumulate, with exact marketplace manifests
|
|
98
148
|
* deduplicated in discovery order. Explicit entries override discovered IDs.
|
|
99
149
|
*/
|
|
100
|
-
declare function
|
|
101
|
-
declare function
|
|
150
|
+
declare function loadDomainsAsync(fs: FileSystem, repoRoot: string, context: IoContext, homeDirectory?: string): Promise<DomainManifest>;
|
|
151
|
+
declare function listDomainNamesAsync(fs: FileSystem, repoRoot: string, context: IoContext, homeDirectory?: string): Promise<string[]>;
|
|
102
152
|
/**
|
|
103
153
|
* Whether to include .claude/skills as shared fallbacks.
|
|
104
154
|
*
|
|
105
155
|
* Shared skills are included unless every selected domain opts out, so mixing a
|
|
106
156
|
* trimmed domain with an untrimmed one cannot strip the untrimmed one's skills.
|
|
107
157
|
*/
|
|
108
|
-
declare function
|
|
158
|
+
declare function resolveSharedSkillsAsync(fs: FileSystem, repoRoot: string, domainNames: string[], context: IoContext, homeDirectory?: string): Promise<boolean>;
|
|
109
159
|
/** Resolves named domain plugins while preserving each subset filter. */
|
|
110
|
-
declare function
|
|
111
|
-
declare function
|
|
112
|
-
declare const PO_DOMAINS_ENV = "PO_DOMAINS";
|
|
113
|
-
declare const DEFAULT_DOMAIN = "default";
|
|
114
|
-
/**
|
|
115
|
-
* Domains selected when the caller names none.
|
|
116
|
-
*
|
|
117
|
-
* Configuration keeps this axis independent of the major mode. The
|
|
118
|
-
* major-mode-derived choice is retained only as the compatibility fallback for
|
|
119
|
-
* domains files that declare no defaultDomains.
|
|
120
|
-
*/
|
|
121
|
-
declare function defaultDomainsForMajorMode(majorMode: string, environment: NodeJS.ProcessEnv, defaultDomains?: readonly string[]): string[];
|
|
160
|
+
declare function resolvePluginEntriesAsync(fs: FileSystem, repoRoot: string, domainNames: string[], explicitDirectories: string[], context: IoContext, homeDirectory?: string): Promise<PluginEntry[]>;
|
|
161
|
+
declare function resolvePluginDirectoriesAsync(fs: FileSystem, repoRoot: string, domainNames: string[], explicitDirectories: string[], context: IoContext, homeDirectory?: string): Promise<string[]>;
|
|
122
162
|
//#endregion
|
|
123
163
|
//#region src/services/domains/completion.d.ts
|
|
124
164
|
/** Splits comma-joined selections and expands aliases into concrete domain names. */
|
|
@@ -129,14 +169,5 @@ declare function domainCompletionItems(domainNames: string[], query: string): Ar
|
|
|
129
169
|
label: string;
|
|
130
170
|
}>;
|
|
131
171
|
//#endregion
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
/** Matches Codex manifest precedence, including schema-gated root plugin.json. */
|
|
135
|
-
declare function findPluginManifestPath(pluginRoot: string): string | undefined;
|
|
136
|
-
declare function pluginDirectoryForSource(source: PluginSource, homeDoomDirectory: string): string;
|
|
137
|
-
declare function isRemotePluginSource(source: PluginSource): source is GitPluginSource | Extract<PluginSource, {
|
|
138
|
-
type: 'npm';
|
|
139
|
-
}>;
|
|
140
|
-
//#endregion
|
|
141
|
-
export { PluginCatalog as C, PluginSkillDiscovery as D, PluginManifestMetadata as E, PluginSource as O, NpmPluginSource as S, PluginEntry as T, DomainManifest as _, domainCompletionItems as a, GitPluginSource as b, DEFAULT_DOMAIN as c, listDomainNames as d, loadDomains as f, DomainDefinition as g, resolveSharedSkills as h, pluginDirectoryForSource as i, ResolvedDomain as k, PO_DOMAINS_ENV as l, resolvePluginEntries as m, findPluginManifestPath as n, domainCompletionPrefix as o, resolvePluginDirectories as p, isRemotePluginSource as r, expandDomainNames as s, MARKETPLACE_MANIFEST_RELATIVE_PATHS as t, defaultDomainsForMajorMode as u, DomainMcpAllowlist as v, PluginCatalogEntry as w, LocalPluginSource as x, DomainPlugin as y };
|
|
142
|
-
//# sourceMappingURL=index-BT29GZx5.d.mts.map
|
|
172
|
+
export { PluginCatalogEntry as A, DomainManifest as C, LocalPluginSource as D, GitPluginSource as E, ResolvedDomain as F, PluginManifestMetadata as M, PluginSkillDiscovery as N, NpmPluginSource as O, PluginSource as P, DomainDefinition as S, DomainPlugin as T, findPluginManifestPathAsync as _, loadDomainsAsync as a, isRemotePluginSource as b, resolveSharedSkillsAsync as c, resolvePluginDirectories as d, resolvePluginEntries as f, defaultDomainsForMajorMode as g, PO_DOMAINS_ENV as h, listDomainNamesAsync as i, PluginEntry as j, PluginCatalog as k, listDomainNames as l, DEFAULT_DOMAIN as m, domainCompletionPrefix as n, resolvePluginDirectoriesAsync as o, resolveSharedSkills as p, expandDomainNames as r, resolvePluginEntriesAsync as s, domainCompletionItems as t, loadDomains as u, findPluginManifestPath as v, DomainMcpAllowlist as w, pluginDirectoryForSource as x, MARKETPLACE_MANIFEST_RELATIVE_PATHS as y };
|
|
173
|
+
//# sourceMappingURL=completion-Ba0TiBHa.d.mts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"completion-Ba0TiBHa.d.mts","names":[],"sources":["../src/types/domains.ts","../src/services/pluginCatalog/parse.ts","../src/services/pluginCatalog/sync.ts","../src/services/pluginCatalog/index.ts","../src/services/domains/core.ts","../src/services/domains/sync.ts","../src/services/domains/index.ts","../src/services/domains/completion.ts"],"mappings":";;;UAAiB;EACf;;EAEA;;UAGe;EACf;EACA;;EAEA;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA;;KAGU,eAAe,oBAAoB,kBAAkB;KACrD;UAEK;EACf;EACA;EACA;EACA;EACA;;UAGe;EACf,QAAQ;EACR;EACA;EACA,WAAW;;UAGI;;EAEf;;EAEA;;EAEA,SAAS,eAAe;;EAExB;;;KAIU;EAEN;EAAc;EAAmB;EAAmB;EAAiB;;UAE1D;;EAEf;;EAEA;;UAGe;EACf;EACA,UAAU;EACV,MAAM;EACN;;UAGe,uBAAuB;EACtC;;UAGe;EACf,SAAS;EACT,SAAS,eAAe;EACxB,SAAS;EACT;;UAGe;;EAEf;EACA;;EAEA;;EAEA,SAAS;;EAET,WAAW;EACX,iBAAiB;EACjB;EACA;EACA;EACA;;;;cC/EW;iBAgWG,yBAAyB,QAAQ,cAAc;iBAU/C,qBACd,QAAQ,eACP,UAAU,kBAAkB,QAAQ;EAAgB;;;;;;;;iBCnVvC,uBAAuB;;;KCnBlC,UAAU,WAAW;;iBAwDJ,4BACpB,IAAI,YACJ,oBACA,SAAS,UACR;;;cC4KU;cACA;;;;;;;;iBAiBG,2BACd,mBACA,aAAa,OAAO,YACpB;;;;;;;;iBC7Pc,YAAY,kBAAkB,yBAAmD;;iBAMjF,gBAAgB,kBAAkB;;iBAKlC,oBAAoB,kBAAkB,uBAAuB;;iBAK7D,qBACd,kBACA,uBACA,+BACA,yBACC;;iBAkBa,yBACd,kBACA,uBACA,+BACA;;;KClDG,YAAY,WAAW;;;;;;;;iBAkCN,iBACpB,IAAI,YACJ,kBACA,SAAS,WACT,yBACC,QAAQ;iBAOW,qBACpB,IAAI,YACJ,kBACA,SAAS,WACT,yBACC;;;;;;;iBAUmB,yBACpB,IAAI,YACJ,kBACA,uBACA,SAAS,WACT,yBACC;;iBAKmB,0BACpB,IAAI,YACJ,kBACA,uBACA,+BACA,SAAS,WACT,yBACC,QAAQ;iBAiBW,8BACpB,IAAI,YACJ,kBACA,uBACA,+BACA,SAAS,WACT,yBACC;;;;iBCjHa,kBAAkB,UAAU,gBAAgB;iBAW5C,uBAAuB;iBAKvB,sBAAsB,uBAAuB,gBAAgB;EAAQ;EAAe"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export { PO_CONFIG_SERVICE as t } from "@agimon-ai/po-core/config";
|