@agimon-ai/po-config 0.0.0-alpha.7 → 0.0.0-alpha.71

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (169) hide show
  1. package/LICENSE +149 -21
  2. package/README.md +17 -7
  3. package/dist/agentPluginMcp.cjs +67 -0
  4. package/dist/agentPluginMcp.cjs.map +1 -1
  5. package/dist/agentPluginMcp.d.mts +4 -1
  6. package/dist/agentPluginMcp.d.mts.map +1 -1
  7. package/dist/agentPluginMcp.mjs +67 -1
  8. package/dist/agentPluginMcp.mjs.map +1 -1
  9. package/dist/{completion-Ba0TiBHa.d.mts → completion-CqlF0TFY.d.mts} +3 -93
  10. package/dist/completion-CqlF0TFY.d.mts.map +1 -0
  11. package/dist/{config-Cdybp9rT.cjs → config-B75TDv35.cjs} +16 -16
  12. package/dist/config-B75TDv35.cjs.map +1 -0
  13. package/dist/{config-Cxc2xw54.mjs → config-BKBk2p6v.mjs} +16 -16
  14. package/dist/config-BKBk2p6v.mjs.map +1 -0
  15. package/dist/{config-pxC7FyUJ.d.mts → config-DdvV_R4Q.d.mts} +73 -13
  16. package/dist/config-DdvV_R4Q.d.mts.map +1 -0
  17. package/dist/config.cjs +3 -3
  18. package/dist/config.d.mts +2 -2
  19. package/dist/config.mjs +3 -3
  20. package/dist/{configPolicy-DueX0k6i.mjs → configPolicy-BADJDi8o.mjs} +179 -4
  21. package/dist/configPolicy-BADJDi8o.mjs.map +1 -0
  22. package/dist/{configPolicy-CowlLhK1.cjs → configPolicy-BsQTmDKr.cjs} +179 -4
  23. package/dist/configPolicy-BsQTmDKr.cjs.map +1 -0
  24. package/dist/{configWriter-DGO0gmXo.cjs → configWriter-BMT2f85J.cjs} +2 -2
  25. package/dist/{configWriter-DGO0gmXo.cjs.map → configWriter-BMT2f85J.cjs.map} +1 -1
  26. package/dist/{configWriter-DCASRzr-.mjs → configWriter-Bi0xlkzW.mjs} +2 -2
  27. package/dist/{configWriter-DCASRzr-.mjs.map → configWriter-Bi0xlkzW.mjs.map} +1 -1
  28. package/dist/configWriter.cjs +1 -1
  29. package/dist/configWriter.mjs +1 -1
  30. package/dist/{core-DKWW9gkh.mjs → core-B0RBX1-I.mjs} +11 -10
  31. package/dist/core-B0RBX1-I.mjs.map +1 -0
  32. package/dist/{core-B0Qg0Qq2.cjs → core-CWPpoX0B.cjs} +11 -10
  33. package/dist/core-CWPpoX0B.cjs.map +1 -0
  34. package/dist/domains-Bo9krPQ5.d.mts +93 -0
  35. package/dist/domains-Bo9krPQ5.d.mts.map +1 -0
  36. package/dist/{domains-CiDUsRiX.cjs → domains-CyLUOwPp.cjs} +4 -4
  37. package/dist/domains-CyLUOwPp.cjs.map +1 -0
  38. package/dist/{domains-IlieGHaY.mjs → domains-kCa6tLxF.mjs} +4 -4
  39. package/dist/domains-kCa6tLxF.mjs.map +1 -0
  40. package/dist/domains.cjs +2 -2
  41. package/dist/domains.d.mts +2 -1
  42. package/dist/domains.mjs +2 -2
  43. package/dist/extensions/mcp.cjs +6 -6
  44. package/dist/extensions/mcp.cjs.map +1 -1
  45. package/dist/extensions/mcp.mjs +6 -6
  46. package/dist/extensions/mcp.mjs.map +1 -1
  47. package/dist/extensions/server.cjs +18 -362
  48. package/dist/extensions/server.cjs.map +1 -1
  49. package/dist/extensions/server.d.mts +2 -2
  50. package/dist/extensions/server.d.mts.map +1 -1
  51. package/dist/extensions/server.mjs +15 -359
  52. package/dist/extensions/server.mjs.map +1 -1
  53. package/dist/{harnessState-BrmH0lG5.cjs → harnessState-CQBNDL1D.cjs} +5 -27
  54. package/dist/harnessState-CQBNDL1D.cjs.map +1 -0
  55. package/dist/{harnessState-8lZda_8r.mjs → harnessState-ufE-npBa.mjs} +5 -27
  56. package/dist/harnessState-ufE-npBa.mjs.map +1 -0
  57. package/dist/harnessState.cjs +1 -1
  58. package/dist/harnessState.d.mts +1 -1
  59. package/dist/harnessState.mjs +1 -1
  60. package/dist/{harnessStore-BinxGITh.cjs → harnessStore-Dgn3T4sR.cjs} +2 -2
  61. package/dist/harnessStore-Dgn3T4sR.cjs.map +1 -0
  62. package/dist/{harnessStore-w8zHmJ_H.mjs → harnessStore-yqKUx-kP.mjs} +2 -2
  63. package/dist/harnessStore-yqKUx-kP.mjs.map +1 -0
  64. package/dist/harnessStore.cjs +1 -1
  65. package/dist/harnessStore.d.mts +1 -1
  66. package/dist/harnessStore.mjs +1 -1
  67. package/dist/index-7RuIAWX1.d.mts.map +1 -1
  68. package/dist/{index-BTOU4XiI.d.mts → index-BQZolhwB.d.mts} +5 -8
  69. package/dist/index-BQZolhwB.d.mts.map +1 -0
  70. package/dist/{index-Nbj2iQWw.d.mts → index-BWne-gYh.d.mts} +33 -3
  71. package/dist/index-BWne-gYh.d.mts.map +1 -0
  72. package/dist/{index-dYgF03lE.d.mts → index-BqEBQ2Uz.d.mts} +3 -3
  73. package/dist/{index-dYgF03lE.d.mts.map → index-BqEBQ2Uz.d.mts.map} +1 -1
  74. package/dist/{index-D_OtYtsl.d.mts → index-DLt5gipX.d.mts} +2 -2
  75. package/dist/{index-D_OtYtsl.d.mts.map → index-DLt5gipX.d.mts.map} +1 -1
  76. package/dist/{index-D3vGEYup.d.mts → index-DxRjrpTC.d.mts} +5 -4
  77. package/dist/index-DxRjrpTC.d.mts.map +1 -0
  78. package/dist/{index-CE5g27J6.d.mts → index-LVklWqVp.d.mts} +15 -14
  79. package/dist/index-LVklWqVp.d.mts.map +1 -0
  80. package/dist/index-fTuf8tVH.d.mts.map +1 -1
  81. package/dist/index-nVcEC1jO.d.mts.map +1 -1
  82. package/dist/index.cjs +15 -13
  83. package/dist/index.d.mts +21 -10
  84. package/dist/index.d.mts.map +1 -0
  85. package/dist/index.mjs +14 -13
  86. package/dist/{init-BdZ-gqqk.cjs → init-4E4W_fl1.cjs} +39 -17
  87. package/dist/init-4E4W_fl1.cjs.map +1 -0
  88. package/dist/{init-DG7MxGxC.mjs → init-BlopOLXb.mjs} +39 -17
  89. package/dist/init-BlopOLXb.mjs.map +1 -0
  90. package/dist/init.cjs +1 -1
  91. package/dist/init.mjs +1 -1
  92. package/dist/{layeredConfig-Bs18dXQG.cjs → layeredConfig-BczonW-E.cjs} +2 -2
  93. package/dist/{layeredConfig-Bs18dXQG.cjs.map → layeredConfig-BczonW-E.cjs.map} +1 -1
  94. package/dist/{layeredConfig-BbkoIEfM.mjs → layeredConfig-CdvkyGXV.mjs} +2 -2
  95. package/dist/{layeredConfig-BbkoIEfM.mjs.map → layeredConfig-CdvkyGXV.mjs.map} +1 -1
  96. package/dist/layeredConfig.cjs +1 -1
  97. package/dist/layeredConfig.d.mts.map +1 -1
  98. package/dist/layeredConfig.mjs +1 -1
  99. package/dist/{majorModes-Ddx975MG.mjs → majorModes-B9FkUfa_.mjs} +35 -22
  100. package/dist/majorModes-B9FkUfa_.mjs.map +1 -0
  101. package/dist/{majorModes-Ctsdi8QW.cjs → majorModes-BkVSvdF4.cjs} +40 -33
  102. package/dist/majorModes-BkVSvdF4.cjs.map +1 -0
  103. package/dist/majorModes.cjs +2 -3
  104. package/dist/majorModes.d.mts +2 -2
  105. package/dist/majorModes.mjs +1 -1
  106. package/dist/piConfig-Bq36PQFF.mjs.map +1 -1
  107. package/dist/piConfig-cluCie5i.cjs.map +1 -1
  108. package/dist/piContext.cjs +1 -1
  109. package/dist/piContext.d.mts +2 -2
  110. package/dist/piContext.mjs +1 -1
  111. package/dist/{profiles-CHict0x-.mjs → profiles-BKJckZka.mjs} +160 -33
  112. package/dist/profiles-BKJckZka.mjs.map +1 -0
  113. package/dist/{profiles-t2EUj0aB.cjs → profiles-Bwkq759J.cjs} +162 -29
  114. package/dist/profiles-Bwkq759J.cjs.map +1 -0
  115. package/dist/profiles.cjs +2 -1
  116. package/dist/profiles.d.mts +3 -3
  117. package/dist/profiles.d.mts.map +1 -1
  118. package/dist/profiles.mjs +1 -1
  119. package/dist/selectionSwitch.cjs +13 -14
  120. package/dist/selectionSwitch.cjs.map +1 -1
  121. package/dist/selectionSwitch.d.mts +5 -4
  122. package/dist/selectionSwitch.d.mts.map +1 -1
  123. package/dist/selectionSwitch.mjs +13 -14
  124. package/dist/selectionSwitch.mjs.map +1 -1
  125. package/dist/{sessionConfig-DeP6pplT.cjs → sessionConfig-Bo7xJ8Hp.cjs} +16 -8
  126. package/dist/sessionConfig-Bo7xJ8Hp.cjs.map +1 -0
  127. package/dist/{sessionConfig-DFQF618G.mjs → sessionConfig-oQ24DO-4.mjs} +16 -8
  128. package/dist/sessionConfig-oQ24DO-4.mjs.map +1 -0
  129. package/dist/settingsApi-BbDdtEWq.mjs +351 -0
  130. package/dist/settingsApi-BbDdtEWq.mjs.map +1 -0
  131. package/dist/settingsApi-DMNAPMIe.cjs +356 -0
  132. package/dist/settingsApi-DMNAPMIe.cjs.map +1 -0
  133. package/dist/sync-BJ8gCP9s.mjs.map +1 -1
  134. package/dist/{sync-CC_15kkB.d.mts → sync-C3p_NDH3.d.mts} +3 -2
  135. package/dist/sync-C3p_NDH3.d.mts.map +1 -0
  136. package/dist/sync-Dlxz2msM.cjs.map +1 -1
  137. package/dist/types.d.mts +2 -2
  138. package/llms.txt +2 -2
  139. package/package.json +12 -13
  140. package/src/prompts/{po-author-config → help-how-to-config}/SKILL.md +1 -1
  141. package/src/prompts/{po-author-config → help-how-to-config}/agents/openai.yaml +1 -1
  142. package/src/prompts/{po-author-config → help-how-to-config}/references/config-contract.md +20 -0
  143. package/dist/completion-Ba0TiBHa.d.mts.map +0 -1
  144. package/dist/config-Cdybp9rT.cjs.map +0 -1
  145. package/dist/config-Cxc2xw54.mjs.map +0 -1
  146. package/dist/config-pxC7FyUJ.d.mts.map +0 -1
  147. package/dist/configPolicy-CowlLhK1.cjs.map +0 -1
  148. package/dist/configPolicy-DueX0k6i.mjs.map +0 -1
  149. package/dist/core-B0Qg0Qq2.cjs.map +0 -1
  150. package/dist/core-DKWW9gkh.mjs.map +0 -1
  151. package/dist/domains-CiDUsRiX.cjs.map +0 -1
  152. package/dist/domains-IlieGHaY.mjs.map +0 -1
  153. package/dist/harnessState-8lZda_8r.mjs.map +0 -1
  154. package/dist/harnessState-BrmH0lG5.cjs.map +0 -1
  155. package/dist/harnessStore-BinxGITh.cjs.map +0 -1
  156. package/dist/harnessStore-w8zHmJ_H.mjs.map +0 -1
  157. package/dist/index-BTOU4XiI.d.mts.map +0 -1
  158. package/dist/index-CE5g27J6.d.mts.map +0 -1
  159. package/dist/index-D3vGEYup.d.mts.map +0 -1
  160. package/dist/index-Nbj2iQWw.d.mts.map +0 -1
  161. package/dist/init-BdZ-gqqk.cjs.map +0 -1
  162. package/dist/init-DG7MxGxC.mjs.map +0 -1
  163. package/dist/majorModes-Ctsdi8QW.cjs.map +0 -1
  164. package/dist/majorModes-Ddx975MG.mjs.map +0 -1
  165. package/dist/profiles-CHict0x-.mjs.map +0 -1
  166. package/dist/profiles-t2EUj0aB.cjs.map +0 -1
  167. package/dist/sessionConfig-DFQF618G.mjs.map +0 -1
  168. package/dist/sessionConfig-DeP6pplT.cjs.map +0 -1
  169. package/dist/sync-CC_15kkB.d.mts.map +0 -1
package/LICENSE CHANGED
@@ -1,21 +1,149 @@
1
- MIT License
2
-
3
- Copyright (c) 2026 Vuong Ngo
4
-
5
- Permission is hereby granted, free of charge, to any person obtaining a copy
6
- of this software and associated documentation files (the "Software"), to deal
7
- in the Software without restriction, including without limitation the rights
8
- to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9
- copies of the Software, and to permit persons to whom the Software is
10
- furnished to do so, subject to the following conditions:
11
-
12
- The above copyright notice and this permission notice shall be included in all
13
- copies or substantial portions of the Software.
14
-
15
- THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16
- IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17
- FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18
- AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19
- LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20
- OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21
- SOFTWARE.
1
+ License text copyright © 2017 MariaDB Corporation Ab, All Rights Reserved.
2
+ "Business Source License" is a trademark of MariaDB Corporation Ab.
3
+
4
+ Parameters
5
+
6
+ Licensor: Agimon Pty Ltd
7
+ Licensed Work: Po, the software in the Po source repository and the
8
+ packages released from it, in each version released by
9
+ the Licensor.
10
+ The Licensed Work is (c) 2026 Agimon Pty Ltd.
11
+ Material identified as third-party in the "Third-party
12
+ components" section at the end of this file or in a
13
+ NOTICE file, and any package or directory whose own
14
+ license file grants a different license, is not part of
15
+ the Licensed Work and remains under its own license.
16
+ Additional Use Grant: You may make production use of the Licensed Work if
17
+ your use is Eligible Use. "Eligible Use" is production use that falls
18
+ within at least one of the following:
19
+
20
+ (a) Personal Use. Use by an individual for their own personal purposes,
21
+ and not on behalf of, or for the benefit of, an employer, client, or
22
+ other Organization. Use by an individual in the course of employment
23
+ or engagement by an Organization is use by that Organization.
24
+
25
+ (b) Small Organization Use. Use by or on behalf of an Organization whose
26
+ Annual Revenue is less than USD 1,000,000.
27
+
28
+ (c) Non-profit, Education and Research Use. Use, regardless of Annual
29
+ Revenue, by (i) an Organization registered or recognized as a
30
+ non-profit or charitable organization under the laws of its
31
+ jurisdiction, for its non-profit purposes; (ii) an accredited school,
32
+ college, or university, for teaching, learning, or academic research;
33
+ or (iii) a publicly funded research institution, for its research.
34
+
35
+ (d) Service Provider Use. Use by a consultant, contractor, agency, or other
36
+ service provider, regardless of its own Annual Revenue, solely to
37
+ build, deploy, host, operate, or support the Licensed Work for a client
38
+ whose own use would be Eligible Use under (a), (b), or (c). A service
39
+ provider's use for its own purposes is Eligible Use only if the service
40
+ provider itself qualifies under (b) or (c).
41
+
42
+
43
+ Hosted services. Offering the Licensed Work to third parties as a hosted
44
+ or managed service whose primary value is the Licensed Work is Eligible
45
+ Use only if each such third party's own use would be Eligible Use.
46
+
47
+ Definitions. "Organization" means any company, partnership, sole
48
+ proprietorship, trust, association, government body, or other entity, and
49
+ includes an individual acting in a business or professional capacity.
50
+ "Affiliate" means any entity that directly or indirectly controls, is
51
+ controlled by, or is under common control with an Organization, where
52
+ "control" means ownership of more than 50% of the voting interests of an
53
+ entity or the power to direct its management and policies by contract or
54
+ otherwise. "Annual Revenue" means the total gross revenue of an
55
+ Organization and all of its Affiliates combined, from all sources and
56
+ whether or not related to the Licensed Work, for its most recently
57
+ completed fiscal year, or, if it has not completed a fiscal year, for the
58
+ twelve months before the use (or since its formation, if shorter),
59
+ converted into US dollars at the average exchange rate for that period.
60
+ Proceeds of equity or debt financing are not revenue.
61
+
62
+ Threshold. If an Organization stops qualifying under (b), its existing
63
+ production use remains Eligible Use for 90 days after it stops
64
+ qualifying, after which it must obtain a commercial license or stop
65
+ production use. Use that was Eligible Use when it occurred never requires
66
+ a commercial license after the fact.
67
+ Change Date: Four years from the date a version of the Licensed Work
68
+ is first publicly released by the Licensor.
69
+ Change License: Apache License, Version 2.0
70
+
71
+ For information about alternative licensing arrangements for the Licensed
72
+ Work, please visit: https://agimon.ai/licensing
73
+
74
+ Notice
75
+
76
+ The Business Source License (this document, or the "License") is not an Open
77
+ Source license. However, the Licensed Work will eventually be made available
78
+ under an Open Source License, as stated in this License.
79
+
80
+ -----------------------------------------------------------------------------
81
+
82
+ Business Source License 1.1
83
+
84
+ Terms
85
+
86
+ The Licensor hereby grants you the right to copy, modify, create derivative
87
+ works, redistribute, and make non-production use of the Licensed Work. The
88
+ Licensor may make an Additional Use Grant, above, permitting limited
89
+ production use.
90
+
91
+ Effective on the Change Date, or the fourth anniversary of the first publicly
92
+ available distribution of a specific version of the Licensed Work under this
93
+ License, whichever comes first, the Licensor hereby grants you rights under
94
+ the terms of the Change License, and the rights granted in the paragraph
95
+ above terminate.
96
+
97
+ If your use of the Licensed Work does not comply with the requirements
98
+ currently in effect as described in this License, you must purchase a
99
+ commercial license from the Licensor, its affiliated entities, or authorized
100
+ resellers, or you must refrain from using the Licensed Work.
101
+
102
+ All copies of the original and modified Licensed Work, and derivative works
103
+ of the Licensed Work, are subject to this License. This License applies
104
+ separately for each version of the Licensed Work and the Change Date may vary
105
+ for each version of the Licensed Work released by Licensor.
106
+
107
+ You must conspicuously display this License on each original or modified copy
108
+ of the Licensed Work. If you receive the Licensed Work in original or
109
+ modified form from a third party, the terms and conditions set forth in this
110
+ License apply to your use of that work.
111
+
112
+ Any use of the Licensed Work in violation of this License will automatically
113
+ terminate your rights under this License for the current and all other
114
+ versions of the Licensed Work.
115
+
116
+ This License does not grant you any right in any trademark or logo of
117
+ Licensor or its affiliates (provided that you may use a trademark or logo of
118
+ Licensor as expressly required by this License).
119
+
120
+ TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
121
+ AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
122
+ EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
123
+ MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
124
+ TITLE.
125
+
126
+ MariaDB hereby grants you permission to use this License’s text to license
127
+ your works, and to refer to it using the trademark “Business Source License”,
128
+ as long as you comply with the Covenants of Licensor below.
129
+
130
+ Covenants of Licensor
131
+
132
+ In consideration of the right to use this License’s text and the “Business
133
+ Source License” name and trademark, Licensor covenants to MariaDB, and to all
134
+ other recipients of the licensed work to be provided by Licensor:
135
+
136
+ 1. To specify as the Change License the GPL Version 2.0 or any later version,
137
+ or a license that is compatible with GPL Version 2.0 or a later version,
138
+ where “compatible” means that software provided under the Change License can
139
+ be included in a program with software provided under GPL Version 2.0 or a
140
+ later version. Licensor may specify additional Change Licenses without
141
+ limitation.
142
+
143
+ 2. To either: (a) specify an additional grant of rights to use that does not
144
+ impose any additional restriction on the right granted in this License, as
145
+ the Additional Use Grant; or (b) insert the text “None”.
146
+
147
+ 3. To specify a Change Date.
148
+
149
+ 4. Not to modify this License in any other way.
package/README.md CHANGED
@@ -31,17 +31,22 @@ is field-specific because some settings are personal and others are repository p
31
31
  | Setting | Effective source policy |
32
32
  | ------------------- | -------------------------------------------------------------------- |
33
33
  | `projectTrust` | Repository value, defaulting to `ask` |
34
+ | `workspaces` | Repository only, personal declarations are ignored |
34
35
  | `editor` | Personal config only |
35
36
  | `modes.planning` | Personal and repository fields merge, with repository values winning |
36
37
  | `voice` | Personal and repository fields merge, with repository values winning |
37
38
  | `voice.autoCapture` | Personal config only |
38
39
  | `selection` | Per-axis merge, with repository values winning |
39
40
 
40
- Supported root keys are `modes`, `projectTrust`, `editor`, `voice`, and `selection`. Unknown keys and
41
- invalid values fail during loading.
41
+ Supported root keys include `modes`, `projectTrust`, `workspaces`, `editor`, `voice`, and `selection`.
42
+ Unknown keys and invalid values fail during loading.
42
43
 
43
44
  ```yaml
44
45
  projectTrust: ask
46
+ workspaces:
47
+ - name: Review
48
+ instructions: Focus on correctness and tests.
49
+ - name: Build
45
50
  modes:
46
51
  planning:
47
52
  main:
@@ -57,10 +62,15 @@ selection:
57
62
  profile: reviewer
58
63
  ```
59
64
 
65
+ `workspaces` is a repository-only list of `{ name, instructions? }` declarations sharing the repository
66
+ root. Names must be nonblank strings and unique after trimming and case-insensitive comparison.
67
+ `instructions` is an optional string. Unknown entry keys are rejected. Omitting the list leaves it
68
+ unset; `workspaces: []` explicitly declares none. A personal config list is ignored, never inherited.
69
+
60
70
  The `selection` mapping names defaults. Definitions for those axes live in `modes.yaml`,
61
71
  `domains.yaml`, and `profiles.yaml` and are documented by their owning package Help skills.
62
72
 
63
- See the shipped [configuration contract](./src/prompts/po-author-config/references/config-contract.md) for
73
+ See the shipped [configuration contract](./src/prompts/help-how-to-config/references/config-contract.md) for
64
74
  the complete runtime schema and additional configuration details.
65
75
 
66
76
  ## Typed session context
@@ -97,7 +107,7 @@ Major-mode, domain, and profile packages resolve their own requested changes, th
97
107
  transition coordinator. Config owns the persisted selection and transition journal records used to
98
108
  distinguish active state from pending intent.
99
109
 
100
- Native session selection is serialized by the kernel and applied to retained facet candidates. Config owns persisted selection and pending transition records; Po factory reload and terminal relaunch are not native authoring mechanisms.
110
+ Native session selection is serialized by the kernel and applied to retained server package candidates. Config owns persisted selection and pending transition records; Po factory reload and terminal relaunch are not native authoring mechanisms.
101
111
 
102
112
  Consumers must not edit `snapshot.harness`, bypass the coordinator, or cache launcher environment
103
113
  state at module scope.
@@ -121,8 +131,8 @@ runtime Config authoring skill.
121
131
 
122
132
  ## Help
123
133
 
124
- The package publishes `src/prompts/po-author-config`, links it from `llms.txt`, and registers
125
- `po-author-config` with the `po/help` Cordis service. The guidance is visible to the AI only
134
+ The package publishes `src/prompts/help-how-to-config`, links it from `llms.txt`, and registers
135
+ `help-how-to-config` with the `po/help` Cordis service. The guidance is visible to the AI only
126
136
  while the parent Help minor mode is active.
127
137
 
128
138
  ## Remote session app
@@ -167,4 +177,4 @@ Maintained by [Agimon](https://agimon.ai/about).
167
177
 
168
178
  ## License
169
179
 
170
- MIT
180
+ Business Source License 1.1: free for personal use, organisations under USD 1M revenue, non-profits and education. See [LICENSE](LICENSE) and https://agimon.ai/licensing.
@@ -377,6 +377,72 @@ function normalizeAgentPluginMcpSource(source, options) {
377
377
  return disabledResult(label, error);
378
378
  }
379
379
  }
380
+ const AGENT_PLUGIN_SCHEMA = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
381
+ function isPlainObject(value) {
382
+ return typeof value === "object" && value !== null && !Array.isArray(value);
383
+ }
384
+ async function stablePluginIdentity(entry) {
385
+ const source = entry.source;
386
+ const identity = source?.type === "git" ? [
387
+ "git",
388
+ source.url,
389
+ source.path ?? ""
390
+ ] : source?.type === "npm" ? [
391
+ "npm",
392
+ source.registry ?? "",
393
+ source.package
394
+ ] : ["local", await node_fs.default.promises.realpath(entry.directory)];
395
+ return (0, node_crypto.createHash)("sha256").update(JSON.stringify(identity)).digest("hex");
396
+ }
397
+ async function rootAgentPluginSchema(entry) {
398
+ const manifestPath = node_path.default.join(entry.directory, "plugin.json");
399
+ if (entry.manifest?.path === manifestPath && entry.manifest.agentPluginSchema === AGENT_PLUGIN_SCHEMA) return AGENT_PLUGIN_SCHEMA;
400
+ try {
401
+ const stat = await node_fs.default.promises.lstat(manifestPath);
402
+ if (stat.isSymbolicLink() || !stat.isFile()) return void 0;
403
+ const parsed = JSON.parse(await node_fs.default.promises.readFile(manifestPath, "utf8"));
404
+ return isPlainObject(parsed) && parsed.$schema === AGENT_PLUGIN_SCHEMA ? AGENT_PLUGIN_SCHEMA : void 0;
405
+ } catch {
406
+ return;
407
+ }
408
+ }
409
+ /** One plugin's MCP config as a projection source, or nothing when it ships none. Shared by sync and settings. */
410
+ async function pluginMcpSource(entry, pluginDataRoot) {
411
+ if (entry.mcp === false) return void 0;
412
+ const pluginRoot = await node_fs.default.promises.realpath(entry.directory);
413
+ const agentPlugin = await rootAgentPluginSchema(entry) === AGENT_PLUGIN_SCHEMA;
414
+ const configPath = node_path.default.join(pluginRoot, agentPlugin ? "mcp.json" : ".mcp.json");
415
+ let stat;
416
+ try {
417
+ stat = await node_fs.default.promises.lstat(configPath);
418
+ } catch (error) {
419
+ if (error.code === "ENOENT") return void 0;
420
+ throw error;
421
+ }
422
+ if (!stat.isFile() || stat.isSymbolicLink()) return void 0;
423
+ const content = await node_fs.default.promises.readFile(configPath);
424
+ const contentDigest = (0, node_crypto.createHash)("sha256").update(content).digest("hex");
425
+ const pluginId = await stablePluginIdentity(entry);
426
+ const sourceId = `plugin:${pluginId}`;
427
+ if (!agentPlugin) return {
428
+ sourceId,
429
+ owner: "plugin",
430
+ format: "native",
431
+ configPath,
432
+ contentDigest
433
+ };
434
+ return {
435
+ sourceId,
436
+ owner: "plugin",
437
+ format: "agent-plugin-v1",
438
+ configPath,
439
+ contentDigest,
440
+ pluginId,
441
+ pluginRoot,
442
+ pluginDataDirectory: node_path.default.join(pluginDataRoot, pluginId),
443
+ mcpSchemaUrl: _agimon_ai_po_core_mcpProjection.AGENT_PLUGIN_MCP_SCHEMA_URL
444
+ };
445
+ }
380
446
  //#endregion
381
447
  //#region src/services/agentPluginMcp/index.ts
382
448
  async function realContainedPath(fs, root, candidate, label, context) {
@@ -497,5 +563,6 @@ async function normalizeAgentPluginMcpSourceAsync(fs, source, options, context)
497
563
  //#endregion
498
564
  exports.normalizeAgentPluginMcpSource = normalizeAgentPluginMcpSource;
499
565
  exports.normalizeAgentPluginMcpSourceAsync = normalizeAgentPluginMcpSourceAsync;
566
+ exports.pluginMcpSource = pluginMcpSource;
500
567
 
501
568
  //# sourceMappingURL=agentPluginMcp.cjs.map
@@ -1 +1 @@
1
- {"version":3,"file":"agentPluginMcp.cjs","names":["path","createHash","AGENT_PLUGIN_MCP_SCHEMA_URL","realContainedPath","fs","normalizeCommand","path","normalizeWorkingDirectory","normalizeServer","writeStagedInternalConfig","randomUUID","path","getOrThrow","nodeHost","writeFileAtomic"],"sources":["../src/services/agentPluginMcp/normalize.ts","../src/services/agentPluginMcp/sync.ts","../src/services/agentPluginMcp/index.ts"],"sourcesContent":["/** Pure Agent Plugin MCP normalisation shared by the async API and the deprecated Node-only sync shim. */\nimport { createHash } from 'node:crypto';\nimport path from 'node:path';\n\nimport { AGENT_PLUGIN_MCP_SCHEMA_URL, type PoMcpAgentPluginProjectionSource } from '@agimon-ai/po-core/mcpProjection';\n\n/** Same token grammar as node:http `validateHeaderName` (RFC 9110 tchar). */\nconst HTTP_TOKEN = /^[\\^_`a-zA-Z\\-0-9!#$%&'*+.|~]+$/u;\n/** Same rejected characters as node:http `validateHeaderValue`. */\nconst INVALID_HEADER_VALUE_CHARACTER = /[^\\t\\x20-\\x7e\\x80-\\xff]/u;\nconst IPV4_OCTET = '(?:25[0-5]|2[0-4]\\\\d|1\\\\d\\\\d|[1-9]?\\\\d)';\nconst IPV4_ADDRESS = new RegExp(`^${IPV4_OCTET}(?:\\\\.${IPV4_OCTET}){3}$`, 'u');\n\nfunction isIPv4(value: string): boolean {\n return IPV4_ADDRESS.test(value);\n}\n\nexport const PRIVATE_FILE_MODE = 0o600;\nexport const PRIVATE_DIRECTORY_MODE = 0o700;\nexport const RESERVED_ENVIRONMENT_KEYS = new Set(['PLUGIN_ROOT', 'PLUGIN_DATA']);\nexport const PROXY_SERVER_ALIASES = new Set(['mcp-proxy', 'agiflow-proxy']);\n\nexport type JsonObject = Record<string, unknown>;\n\nexport interface AgentPluginMcpConfigSource {\n path: string;\n format: 'internal';\n cacheKey: string;\n}\n\nexport interface NormalizedAgentPluginMcpSource {\n /** Owner-only, content-addressed layer that bypasses Claude env interpolation. */\n configSource?: AgentPluginMcpConfigSource;\n /** Claude-compatible definitions for an external merged config. */\n claudeConfig: { mcpServers: Record<string, JsonObject> };\n serverNames: string[];\n droppedServers: string[];\n diagnostics: string[];\n}\n\nexport interface NormalizeAgentPluginMcpOptions {\n stagingDirectory: string;\n /** Empty and absent lists both mean keep every server. */\n allowedServers?: readonly string[];\n /** Po strips nested wrappers; external-only callers may opt out. */\n stripProxyWrappers?: boolean;\n}\n\nexport interface NormalizedServer {\n internal: JsonObject;\n claude: JsonObject;\n}\n\nexport function isObject(value: unknown): value is JsonObject {\n return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nexport function onlyKeys(value: JsonObject, allowed: readonly string[], label: string): void {\n const unexpected = Object.keys(value).find((key) => !allowed.includes(key));\n if (unexpected) throw new Error(`${label} contains unsupported field \"${unexpected}\"`);\n}\n\nexport function nonEmptyString(value: unknown, label: string): string {\n if (typeof value !== 'string' || value.length === 0) throw new Error(`${label} must be a non-empty string`);\n return value;\n}\n\nexport function optionalStringArray(value: unknown, label: string): string[] | undefined {\n if (value === undefined) return undefined;\n if (!Array.isArray(value)) throw new Error(`${label} must be an array of strings`);\n return value.map((item, index) => {\n if (typeof item !== 'string') throw new Error(`${label}[${index}] must be a string`);\n return item;\n });\n}\n\nfunction optionalStringRecord(value: unknown, label: string): Record<string, string> | undefined {\n if (value === undefined) return undefined;\n if (!isObject(value)) throw new Error(`${label} must be an object of string values`);\n return Object.fromEntries(\n Object.entries(value).map(([key, item]) => {\n if (typeof item !== 'string') throw new Error(`${label}.${key} must be a string`);\n return [key, item];\n }),\n );\n}\n\nexport function expandPluginPlaceholders(value: string, pluginRoot: string, pluginDataDirectory: string): string {\n // The portable contract is a single, non-recursive replacement pass. An\n // unrecognised placeholder remains literal and mcp-proxy must not reinterpret it.\n return value.replace(/\\$\\{PLUGIN_(ROOT|DATA)\\}/gu, (placeholder) =>\n placeholder === '${PLUGIN_ROOT}' ? pluginRoot : pluginDataDirectory,\n );\n}\n\nexport function isInside(root: string, candidate: string): boolean {\n const relative = path.relative(root, candidate);\n return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));\n}\n\nexport function normalizeEnvironment(\n value: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n): Record<string, string> {\n const declared = optionalStringRecord(value, 'env') ?? {};\n for (const key of Object.keys(declared)) {\n const reservedKey = process.platform === 'win32' ? key.toUpperCase() : key;\n if (RESERVED_ENVIRONMENT_KEYS.has(reservedKey)) {\n throw new Error(`env key \"${key}\" is reserved by Agent Plugins`);\n }\n }\n return {\n ...Object.fromEntries(\n Object.entries(declared).map(([key, item]) => [\n key,\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n ]),\n ),\n PLUGIN_ROOT: pluginRoot,\n PLUGIN_DATA: pluginDataDirectory,\n };\n}\n\nfunction isLoopbackHost(hostname: string): boolean {\n const bareHostname = hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname;\n if (bareHostname.toLowerCase() === 'localhost') return true;\n if (isIPv4(bareHostname)) return bareHostname.split('.')[0] === '127';\n return bareHostname === '::1';\n}\n\nexport function normalizeUrl(value: unknown): string {\n const raw = nonEmptyString(value, 'url');\n let parsed: URL;\n try {\n parsed = new URL(raw);\n } catch {\n throw new Error('url must be an absolute HTTP(S) URL');\n }\n if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {\n throw new Error('url must use http or https');\n }\n if (parsed.username || parsed.password) throw new Error('url must not contain user information');\n if (parsed.hash) throw new Error('url must not contain a fragment');\n if (parsed.protocol === 'http:' && !isLoopbackHost(parsed.hostname)) {\n throw new Error('non-loopback MCP URLs must use https');\n }\n return raw;\n}\n\nexport function normalizeHeaders(value: unknown): Record<string, string> | undefined {\n const headers = optionalStringRecord(value, 'headers');\n if (!headers) return undefined;\n const seen = new Set<string>();\n for (const [name, item] of Object.entries(headers)) {\n const canonical = name.toLowerCase();\n if (seen.has(canonical)) throw new Error(`headers contain duplicate name \"${name}\"`);\n seen.add(canonical);\n if (!HTTP_TOKEN.test(name) || INVALID_HEADER_VALUE_CHARACTER.test(item)) {\n throw new Error(`header \"${name}\" is invalid`);\n }\n }\n return headers;\n}\n\nexport function stagedInternalPath(\n source: PoMcpAgentPluginProjectionSource,\n contents: string,\n stagingDirectory: string,\n): string {\n const digest = createHash('sha256')\n .update(source.sourceId)\n .update('\\0')\n .update(source.contentDigest)\n .update('\\0')\n .update(contents)\n .digest('hex')\n .slice(0, 20);\n return path.join(stagingDirectory, `agent-plugin-mcp-${digest}.internal.json`);\n}\n\nexport function emptyResult(diagnostic: string): NormalizedAgentPluginMcpSource {\n return {\n claudeConfig: { mcpServers: {} },\n serverNames: [],\n droppedServers: [],\n diagnostics: [diagnostic],\n };\n}\n\nexport function sourceLabel(source: PoMcpAgentPluginProjectionSource): string {\n return `Agent Plugin MCP source \"${source.sourceId}\"`;\n}\n\n/** Checks the projection identity before any file is touched. */\nexport function assertProjectionSource(source: PoMcpAgentPluginProjectionSource): void {\n if (source.mcpSchemaUrl !== AGENT_PLUGIN_MCP_SCHEMA_URL) {\n throw new Error(`unsupported schema \"${String(source.mcpSchemaUrl)}\"`);\n }\n if (!path.isAbsolute(source.pluginRoot) || !path.isAbsolute(source.pluginDataDirectory)) {\n throw new Error('pluginRoot and pluginDataDirectory must be absolute');\n }\n}\n\nexport function assertRootConfigPath(configPath: string, pluginRoot: string): void {\n if (path.dirname(configPath) !== pluginRoot || path.basename(configPath) !== 'mcp.json') {\n throw new Error('portable plugin config must be root mcp.json');\n }\n}\n\n/** Verifies the digest and document shape of the raw mcp.json bytes; returns its server map. */\nexport function parseMcpDocument(\n source: PoMcpAgentPluginProjectionSource,\n bytes: Uint8Array,\n label: string,\n): Record<string, unknown> {\n const digest = createHash('sha256').update(bytes).digest('hex');\n if (digest !== source.contentDigest) throw new Error('content digest does not match the projection');\n const parsed: unknown = JSON.parse(new TextDecoder('utf-8', { ignoreBOM: true }).decode(bytes));\n if (!isObject(parsed)) throw new Error('document must be an object');\n onlyKeys(parsed, ['$schema', 'mcpServers'], label);\n if (parsed.$schema !== source.mcpSchemaUrl) throw new Error('$schema does not match the projected schema');\n if (!isObject(parsed.mcpServers)) throw new Error('mcpServers must be an object');\n return parsed.mcpServers;\n}\n\n/** Whether a declared server is skipped (empty name), dropped by the allowlist or wrapper rule, or normalised. */\nexport function serverDisposition(name: string, options: NormalizeAgentPluginMcpOptions): 'empty' | 'dropped' | 'keep' {\n if (!name) return 'empty';\n const allowed = options.allowedServers;\n const keepAll = !allowed || allowed.length === 0;\n const stripProxyWrappers = options.stripProxyWrappers ?? true;\n if ((!keepAll && !allowed.includes(name)) || (stripProxyWrappers && PROXY_SERVER_ALIASES.has(name))) return 'dropped';\n return 'keep';\n}\n\nexport function emptyServerDiagnostic(label: string): string {\n return `${label} contains an empty server name; that entry was skipped.`;\n}\n\nexport function skippedServerDiagnostic(label: string, name: string, error: unknown): string {\n return `${label} skipped server \"${name}\": ${error instanceof Error ? error.message : String(error)}`;\n}\n\nexport function disabledResult(label: string, error: unknown): NormalizedAgentPluginMcpSource {\n return emptyResult(`${label} was disabled: ${error instanceof Error ? error.message : String(error)}`);\n}\n\n/** The declared transport of one server; stdio declarations are also checked for unsupported fields. */\nexport function serverType(raw: unknown, name: string): string {\n if (!isObject(raw)) throw new Error('definition must be an object');\n const type = nonEmptyString(raw.type, 'type');\n if (type === 'stdio') onlyKeys(raw, ['type', 'command', 'args', 'env', 'cwd'], `server \"${name}\"`);\n return type;\n}\n\nexport function stdioServer(\n name: string,\n config: { command: string; args?: string[]; env: Record<string, string>; cwd: string },\n): NormalizedServer {\n return {\n internal: { name, transport: 'stdio', config },\n claude: { type: 'stdio', ...config },\n };\n}\n\n/** A streamable-http or sse server; any other type is unsupported. */\nexport function remoteServer(raw: JsonObject, name: string, type: string): NormalizedServer {\n if (type === 'streamable-http' || type === 'sse') {\n onlyKeys(raw, ['type', 'url', 'headers'], `server \"${name}\"`);\n const url = normalizeUrl(raw.url);\n const headers = normalizeHeaders(raw.headers);\n const transport = type === 'streamable-http' ? 'http' : 'sse';\n const config = { url, ...(headers ? { headers } : {}) };\n return {\n internal: { name, transport, config },\n claude: { type: transport, ...config },\n };\n }\n throw new Error(`unsupported transport type \"${type}\"`);\n}\n\nexport function stagedContents(internalServers: Record<string, JsonObject>): string {\n return `${JSON.stringify({ mcpServers: internalServers }, null, 2)}\\n`;\n}\n\nexport function stagedCacheKey(source: PoMcpAgentPluginProjectionSource, configPath: string, contents: string): string {\n return createHash('sha256')\n .update('agent-plugin-v1\\0')\n .update(source.sourceId)\n .update('\\0')\n .update(source.contentDigest)\n .update('\\0')\n .update(configPath)\n .update('\\0')\n .update(contents)\n .digest('hex');\n}\n\n/** The containment base and expanded path of a declared cwd, or undefined when the plugin root is the default. */\nexport function workingDirectoryCandidate(\n declared: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n): { base: string; candidate: string } | undefined {\n if (declared === undefined) return undefined;\n const cwd = nonEmptyString(declared, 'cwd');\n if (cwd.startsWith('./')) return { base: pluginRoot, candidate: path.resolve(pluginRoot, cwd) };\n const expanded = expandPluginPlaceholders(cwd, pluginRoot, pluginDataDirectory);\n if (cwd === '${PLUGIN_ROOT}' || cwd.startsWith('${PLUGIN_ROOT}/')) {\n return { base: pluginRoot, candidate: path.resolve(expanded) };\n }\n if (cwd === '${PLUGIN_DATA}' || cwd.startsWith('${PLUGIN_DATA}/')) {\n return { base: pluginDataDirectory, candidate: path.resolve(expanded) };\n }\n throw new Error('cwd must start with ./, ${PLUGIN_ROOT}, or ${PLUGIN_DATA}');\n}\n\n/** Rejects a command that is neither a bare executable name nor a ./ path; true when it must be resolved. */\nexport function isPluginRelativeCommand(command: string): boolean {\n if (command.startsWith('./')) return true;\n if (command === '.' || command === '..' || /[\\s/\\\\]/u.test(command)) {\n throw new Error('command must be a bare executable name or a ./ path inside the plugin');\n }\n return false;\n}\n","import { randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport type { PoMcpAgentPluginProjectionSource } from '@agimon-ai/po-core/mcpProjection';\n\nimport {\n type JsonObject,\n type NormalizeAgentPluginMcpOptions,\n type NormalizedAgentPluginMcpSource,\n type NormalizedServer,\n PRIVATE_DIRECTORY_MODE,\n PRIVATE_FILE_MODE,\n assertProjectionSource,\n assertRootConfigPath,\n disabledResult,\n emptyServerDiagnostic,\n expandPluginPlaceholders,\n isInside,\n isPluginRelativeCommand,\n nonEmptyString,\n normalizeEnvironment,\n optionalStringArray,\n parseMcpDocument,\n remoteServer,\n serverDisposition,\n serverType,\n skippedServerDiagnostic,\n sourceLabel,\n stagedCacheKey,\n stagedContents,\n stagedInternalPath,\n stdioServer,\n workingDirectoryCandidate,\n} from './normalize';\n\nfunction realContainedPath(root: string, candidate: string, label: string): string {\n let realCandidate: string;\n try {\n realCandidate = fs.realpathSync(candidate);\n } catch {\n throw new Error(`${label} does not exist`);\n }\n if (!isInside(root, realCandidate)) throw new Error(`${label} escapes its allowed plugin directory`);\n return realCandidate;\n}\n\nfunction normalizeCommand(command: string, pluginRoot: string): string {\n if (!isPluginRelativeCommand(command)) return command;\n const resolved = realContainedPath(pluginRoot, path.resolve(pluginRoot, command), 'command');\n if (!fs.statSync(resolved).isFile()) throw new Error('command must resolve to a regular file');\n try {\n fs.accessSync(resolved, fs.constants.X_OK);\n } catch {\n throw new Error('command must resolve to an executable file');\n }\n return resolved;\n}\n\nfunction normalizeWorkingDirectory(declared: unknown, pluginRoot: string, pluginDataDirectory: string): string {\n const declaredCwd = workingDirectoryCandidate(declared, pluginRoot, pluginDataDirectory);\n if (!declaredCwd) return pluginRoot;\n const resolved = realContainedPath(declaredCwd.base, declaredCwd.candidate, 'cwd');\n if (!fs.statSync(resolved).isDirectory()) throw new Error('cwd must resolve to a directory');\n return resolved;\n}\n\nfunction normalizeServer(\n raw: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n name: string,\n): NormalizedServer {\n const type = serverType(raw, name);\n const declaration = raw as JsonObject;\n if (type !== 'stdio') return remoteServer(declaration, name, type);\n const command = normalizeCommand(nonEmptyString(declaration.command, 'command'), pluginRoot);\n const args = optionalStringArray(declaration.args, 'args')?.map((item) =>\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n );\n const env = normalizeEnvironment(declaration.env, pluginRoot, pluginDataDirectory);\n const cwd = normalizeWorkingDirectory(declaration.cwd, pluginRoot, pluginDataDirectory);\n return stdioServer(name, { command, ...(args ? { args } : {}), env, cwd });\n}\n\nfunction writeStagedInternalConfig(target: string, contents: string, stagingDirectory: string): void {\n fs.mkdirSync(stagingDirectory, { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n fs.chmodSync(stagingDirectory, PRIVATE_DIRECTORY_MODE);\n const temporaryPath = `${target}.${process.pid}-${randomUUID()}.tmp`;\n try {\n fs.writeFileSync(temporaryPath, contents, { flag: 'wx', mode: PRIVATE_FILE_MODE });\n try {\n fs.renameSync(temporaryPath, target);\n } catch (error) {\n const code = (error as NodeJS.ErrnoException).code;\n if (code !== 'EEXIST' && code !== 'EPERM') throw error;\n const stat = fs.lstatSync(target);\n if (stat.isSymbolicLink() || !stat.isFile() || fs.readFileSync(target, 'utf8') !== contents) {\n throw new Error('content-addressed staging path is occupied by different content');\n }\n }\n fs.chmodSync(target, PRIVATE_FILE_MODE);\n } finally {\n fs.rmSync(temporaryPath, { force: true });\n }\n}\n\n/**\n * Validates one Agent Plugins v1 `mcp.json` and stages a native mcp-proxy layer.\n *\n * Server validation is isolated: one malformed server is diagnosed and skipped.\n * Document/schema, source identity, or plugin-boundary failures reject the whole\n * source. Only the two portable plugin placeholders are expanded; the staged\n * layer is tagged `internal`, so legacy `${ENV}` interpolation cannot run again.\n *\n * @deprecated Node-only sync shim; use normalizeAgentPluginMcpSourceAsync. Removed in M2.\n */\nexport function normalizeAgentPluginMcpSource(\n source: PoMcpAgentPluginProjectionSource,\n options: NormalizeAgentPluginMcpOptions,\n): NormalizedAgentPluginMcpSource {\n const label = sourceLabel(source);\n try {\n assertProjectionSource(source);\n const pluginRoot = fs.realpathSync(source.pluginRoot);\n try {\n const dataStat = fs.lstatSync(source.pluginDataDirectory);\n if (dataStat.isSymbolicLink() || !dataStat.isDirectory()) {\n throw new Error('pluginDataDirectory must be a real directory');\n }\n } catch (error) {\n if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw error;\n fs.mkdirSync(source.pluginDataDirectory, { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n }\n fs.chmodSync(source.pluginDataDirectory, PRIVATE_DIRECTORY_MODE);\n fs.accessSync(source.pluginDataDirectory, fs.constants.W_OK);\n const pluginDataDirectory = fs.realpathSync(source.pluginDataDirectory);\n const configPath = realContainedPath(pluginRoot, source.configPath, 'mcp.json');\n assertRootConfigPath(configPath, pluginRoot);\n\n const servers = parseMcpDocument(source, fs.readFileSync(configPath), label);\n const internalServers = Object.create(null) as Record<string, JsonObject>;\n const claudeServers = Object.create(null) as Record<string, JsonObject>;\n const droppedServers: string[] = [];\n const diagnostics: string[] = [];\n\n for (const [name, rawServer] of Object.entries(servers)) {\n const disposition = serverDisposition(name, options);\n if (disposition === 'empty') {\n diagnostics.push(emptyServerDiagnostic(label));\n continue;\n }\n if (disposition === 'dropped') {\n droppedServers.push(name);\n continue;\n }\n try {\n const normalized = normalizeServer(rawServer, pluginRoot, pluginDataDirectory, name);\n internalServers[name] = normalized.internal;\n claudeServers[name] = normalized.claude;\n } catch (error) {\n droppedServers.push(name);\n diagnostics.push(skippedServerDiagnostic(label, name, error));\n }\n }\n\n const contents = stagedContents(internalServers);\n const target = stagedInternalPath(source, contents, options.stagingDirectory);\n writeStagedInternalConfig(target, contents, options.stagingDirectory);\n return {\n configSource: { path: target, format: 'internal', cacheKey: stagedCacheKey(source, configPath, contents) },\n claudeConfig: { mcpServers: claudeServers },\n serverNames: Object.keys(internalServers),\n droppedServers,\n diagnostics,\n };\n } catch (error) {\n return disabledResult(label, error);\n }\n}\n","import path from 'node:path';\n\nimport type { PoMcpAgentPluginProjectionSource } from '@agimon-ai/po-core/mcpProjection';\nimport { type FileSystem, getOrThrow, nodeHost, writeFileAtomic } from '@agimon-ai/po-core/platform';\n\nimport {\n type JsonObject,\n type NormalizeAgentPluginMcpOptions,\n type NormalizedAgentPluginMcpSource,\n type NormalizedServer,\n PRIVATE_DIRECTORY_MODE,\n PRIVATE_FILE_MODE,\n assertProjectionSource,\n assertRootConfigPath,\n disabledResult,\n emptyServerDiagnostic,\n expandPluginPlaceholders,\n isInside,\n isPluginRelativeCommand,\n nonEmptyString,\n normalizeEnvironment,\n optionalStringArray,\n parseMcpDocument,\n remoteServer,\n serverDisposition,\n serverType,\n skippedServerDiagnostic,\n sourceLabel,\n stagedCacheKey,\n stagedContents,\n stagedInternalPath,\n stdioServer,\n workingDirectoryCandidate,\n} from './normalize';\n\nexport type {\n AgentPluginMcpConfigSource,\n NormalizeAgentPluginMcpOptions,\n NormalizedAgentPluginMcpSource,\n} from './normalize';\nexport { normalizeAgentPluginMcpSource } from './sync';\n\ntype Context = Parameters<FileSystem['readTextFile']>[1];\n\nasync function realContainedPath(\n fs: FileSystem,\n root: string,\n candidate: string,\n label: string,\n context: Context,\n): Promise<string> {\n const real = await fs.canonicalPath(candidate, context);\n if (!real.ok) throw new Error(`${label} does not exist`);\n if (!isInside(root, real.value)) throw new Error(`${label} escapes its allowed plugin directory`);\n return real.value;\n}\n\nasync function normalizeCommand(\n fs: FileSystem,\n command: string,\n pluginRoot: string,\n context: Context,\n): Promise<string> {\n if (!isPluginRelativeCommand(command)) return command;\n const resolved = await realContainedPath(fs, pluginRoot, path.resolve(pluginRoot, command), 'command', context);\n if (getOrThrow(await fs.fileInfo(resolved, context)).kind !== 'file') {\n throw new Error('command must resolve to a regular file');\n }\n // Execute bits stand in for access(X_OK); the edge has no modes, so nodeHost reports none and the check is skipped.\n const mode = await nodeHost.fileMode(resolved);\n if (mode !== undefined && (mode & 0o111) === 0) throw new Error('command must resolve to an executable file');\n return resolved;\n}\n\nasync function normalizeWorkingDirectory(\n fs: FileSystem,\n declared: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n context: Context,\n): Promise<string> {\n const declaredCwd = workingDirectoryCandidate(declared, pluginRoot, pluginDataDirectory);\n if (!declaredCwd) return pluginRoot;\n const resolved = await realContainedPath(fs, declaredCwd.base, declaredCwd.candidate, 'cwd', context);\n if (getOrThrow(await fs.fileInfo(resolved, context)).kind !== 'directory') {\n throw new Error('cwd must resolve to a directory');\n }\n return resolved;\n}\n\nasync function normalizeServer(\n fs: FileSystem,\n raw: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n name: string,\n context: Context,\n): Promise<NormalizedServer> {\n const type = serverType(raw, name);\n const declaration = raw as JsonObject;\n if (type !== 'stdio') return remoteServer(declaration, name, type);\n const command = await normalizeCommand(fs, nonEmptyString(declaration.command, 'command'), pluginRoot, context);\n const args = optionalStringArray(declaration.args, 'args')?.map((item) =>\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n );\n const env = normalizeEnvironment(declaration.env, pluginRoot, pluginDataDirectory);\n const cwd = await normalizeWorkingDirectory(fs, declaration.cwd, pluginRoot, pluginDataDirectory, context);\n return stdioServer(name, { command, ...(args ? { args } : {}), env, cwd });\n}\n\n/** Owner-only plugin data directory; a symbolic link or non-directory rejects the source. */\nasync function preparePluginDataDirectory(fs: FileSystem, directory: string, context: Context): Promise<string> {\n const info = await fs.fileInfo(directory, context);\n if (info.ok) {\n if (info.value.kind !== 'directory') throw new Error('pluginDataDirectory must be a real directory');\n } else if (info.error.code === 'not_found') {\n getOrThrow(await fs.createDir(directory, { recursive: true }, context));\n } else {\n throw info.error;\n }\n await nodeHost.setMode(directory, PRIVATE_DIRECTORY_MODE);\n return getOrThrow(await fs.canonicalPath(directory, context));\n}\n\n/**\n * Content-addressed and owner-only. The name hashes the contents, so replacing an\n * existing staged file through a uniquely named temporary file never changes what it holds.\n */\nasync function writeStagedInternalConfig(\n fs: FileSystem,\n target: string,\n contents: string,\n stagingDirectory: string,\n context: Context,\n): Promise<void> {\n getOrThrow(await fs.createDir(stagingDirectory, { recursive: true }, context));\n await nodeHost.setMode(stagingDirectory, PRIVATE_DIRECTORY_MODE);\n await writeFileAtomic(fs, target, contents, context);\n await nodeHost.setMode(target, PRIVATE_FILE_MODE);\n}\n\n/**\n * Validates one Agent Plugins v1 `mcp.json` and stages a native mcp-proxy layer,\n * reading and writing through the injected file system.\n *\n * Server validation is isolated: one malformed server is diagnosed and skipped.\n * Document/schema, source identity, or plugin-boundary failures reject the whole\n * source. Only the two portable plugin placeholders are expanded; the staged\n * layer is tagged `internal`, so legacy `${ENV}` interpolation cannot run again.\n */\nexport async function normalizeAgentPluginMcpSourceAsync(\n fs: FileSystem,\n source: PoMcpAgentPluginProjectionSource,\n options: NormalizeAgentPluginMcpOptions,\n context: Context,\n): Promise<NormalizedAgentPluginMcpSource> {\n const label = sourceLabel(source);\n try {\n assertProjectionSource(source);\n const pluginRoot = getOrThrow(await fs.canonicalPath(source.pluginRoot, context));\n const pluginDataDirectory = await preparePluginDataDirectory(fs, source.pluginDataDirectory, context);\n const configPath = await realContainedPath(fs, pluginRoot, source.configPath, 'mcp.json', context);\n assertRootConfigPath(configPath, pluginRoot);\n\n const bytes = getOrThrow(await fs.readBinaryFile(configPath, context));\n const servers = parseMcpDocument(source, bytes, label);\n const internalServers = Object.create(null) as Record<string, JsonObject>;\n const claudeServers = Object.create(null) as Record<string, JsonObject>;\n const droppedServers: string[] = [];\n const diagnostics: string[] = [];\n\n for (const [name, rawServer] of Object.entries(servers)) {\n const disposition = serverDisposition(name, options);\n if (disposition === 'empty') {\n diagnostics.push(emptyServerDiagnostic(label));\n continue;\n }\n if (disposition === 'dropped') {\n droppedServers.push(name);\n continue;\n }\n try {\n const normalized = await normalizeServer(fs, rawServer, pluginRoot, pluginDataDirectory, name, context);\n internalServers[name] = normalized.internal;\n claudeServers[name] = normalized.claude;\n } catch (error) {\n droppedServers.push(name);\n diagnostics.push(skippedServerDiagnostic(label, name, error));\n }\n }\n\n const contents = stagedContents(internalServers);\n const target = stagedInternalPath(source, contents, options.stagingDirectory);\n await writeStagedInternalConfig(fs, target, contents, options.stagingDirectory, context);\n return {\n configSource: { path: target, format: 'internal', cacheKey: stagedCacheKey(source, configPath, contents) },\n claudeConfig: { mcpServers: claudeServers },\n serverNames: Object.keys(internalServers),\n droppedServers,\n diagnostics,\n };\n } catch (error) {\n return disabledResult(label, error);\n }\n}\n"],"mappings":";;;;;;;;;;;;AAOA,MAAM,aAAa;;AAEnB,MAAM,iCAAiC;AACvC,MAAM,aAAa;AACnB,MAAM,eAAe,IAAI,OAAO,IAAI,WAAW,QAAQ,WAAW,QAAQ,GAAG;AAE7E,SAAS,OAAO,OAAwB;CACtC,OAAO,aAAa,KAAK,KAAK;AAChC;AAIA,MAAa,4CAA4B,IAAI,IAAI,CAAC,eAAe,aAAa,CAAC;AAC/E,MAAa,uCAAuB,IAAI,IAAI,CAAC,aAAa,eAAe,CAAC;AAiC1E,SAAgB,SAAS,OAAqC;CAC5D,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAgB,SAAS,OAAmB,SAA4B,OAAqB;CAC3F,MAAM,aAAa,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,SAAS,GAAG,CAAC;CAC1E,IAAI,YAAY,MAAM,IAAI,MAAM,GAAG,MAAM,+BAA+B,WAAW,EAAE;AACvF;AAEA,SAAgB,eAAe,OAAgB,OAAuB;CACpE,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CAC1G,OAAO;AACT;AAEA,SAAgB,oBAAoB,OAAgB,OAAqC;CACvF,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,6BAA6B;CACjF,OAAO,MAAM,KAAK,MAAM,UAAU;EAChC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,mBAAmB;EACnF,OAAO;CACT,CAAC;AACH;AAEA,SAAS,qBAAqB,OAAgB,OAAmD;CAC/F,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,oCAAoC;CACnF,OAAO,OAAO,YACZ,OAAO,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU;EACzC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,kBAAkB;EAChF,OAAO,CAAC,KAAK,IAAI;CACnB,CAAC,CACH;AACF;AAEA,SAAgB,yBAAyB,OAAe,YAAoB,qBAAqC;CAG/G,OAAO,MAAM,QAAQ,+BAA+B,gBAClD,gBAAgB,mBAAmB,aAAa,mBAClD;AACF;AAEA,SAAgB,SAAS,MAAc,WAA4B;CACjE,MAAM,WAAWA,UAAAA,QAAK,SAAS,MAAM,SAAS;CAC9C,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,KAAKA,UAAAA,QAAK,KAAK,KAAK,aAAa,QAAQ,CAACA,UAAAA,QAAK,WAAW,QAAQ;AACpH;AAEA,SAAgB,qBACd,OACA,YACA,qBACwB;CACxB,MAAM,WAAW,qBAAqB,OAAO,KAAK,KAAK,CAAC;CACxD,KAAK,MAAM,OAAO,OAAO,KAAK,QAAQ,GAAG;EACvC,MAAM,cAAc,QAAQ,aAAa,UAAU,IAAI,YAAY,IAAI;EACvE,IAAI,0BAA0B,IAAI,WAAW,GAC3C,MAAM,IAAI,MAAM,YAAY,IAAI,+BAA+B;CAEnE;CACA,OAAO;EACL,GAAG,OAAO,YACR,OAAO,QAAQ,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU,CAC5C,KACA,yBAAyB,MAAM,YAAY,mBAAmB,CAChE,CAAC,CACH;EACA,aAAa;EACb,aAAa;CACf;AACF;AAEA,SAAS,eAAe,UAA2B;CACjD,MAAM,eAAe,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG,IAAI,SAAS,MAAM,GAAG,EAAE,IAAI;CAClG,IAAI,aAAa,YAAY,MAAM,aAAa,OAAO;CACvD,IAAI,OAAO,YAAY,GAAG,OAAO,aAAa,MAAM,GAAG,CAAC,CAAC,OAAO;CAChE,OAAO,iBAAiB;AAC1B;AAEA,SAAgB,aAAa,OAAwB;CACnD,MAAM,MAAM,eAAe,OAAO,KAAK;CACvC,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN,MAAM,IAAI,MAAM,qCAAqC;CACvD;CACA,IAAI,OAAO,aAAa,WAAW,OAAO,aAAa,UACrD,MAAM,IAAI,MAAM,4BAA4B;CAE9C,IAAI,OAAO,YAAY,OAAO,UAAU,MAAM,IAAI,MAAM,uCAAuC;CAC/F,IAAI,OAAO,MAAM,MAAM,IAAI,MAAM,iCAAiC;CAClE,IAAI,OAAO,aAAa,WAAW,CAAC,eAAe,OAAO,QAAQ,GAChE,MAAM,IAAI,MAAM,sCAAsC;CAExD,OAAO;AACT;AAEA,SAAgB,iBAAiB,OAAoD;CACnF,MAAM,UAAU,qBAAqB,OAAO,SAAS;CACrD,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,OAAO,GAAG;EAClD,MAAM,YAAY,KAAK,YAAY;EACnC,IAAI,KAAK,IAAI,SAAS,GAAG,MAAM,IAAI,MAAM,mCAAmC,KAAK,EAAE;EACnF,KAAK,IAAI,SAAS;EAClB,IAAI,CAAC,WAAW,KAAK,IAAI,KAAK,+BAA+B,KAAK,IAAI,GACpE,MAAM,IAAI,MAAM,WAAW,KAAK,aAAa;CAEjD;CACA,OAAO;AACT;AAEA,SAAgB,mBACd,QACA,UACA,kBACQ;CACR,MAAM,UAAA,GAASC,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAChC,OAAO,OAAO,QAAQ,CAAC,CACvB,OAAO,IAAI,CAAC,CACZ,OAAO,OAAO,aAAa,CAAC,CAC5B,OAAO,IAAI,CAAC,CACZ,OAAO,QAAQ,CAAC,CAChB,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EAAE;CACd,OAAOD,UAAAA,QAAK,KAAK,kBAAkB,oBAAoB,OAAO,eAAe;AAC/E;AAEA,SAAgB,YAAY,YAAoD;CAC9E,OAAO;EACL,cAAc,EAAE,YAAY,CAAC,EAAE;EAC/B,aAAa,CAAC;EACd,gBAAgB,CAAC;EACjB,aAAa,CAAC,UAAU;CAC1B;AACF;AAEA,SAAgB,YAAY,QAAkD;CAC5E,OAAO,4BAA4B,OAAO,SAAS;AACrD;;AAGA,SAAgB,uBAAuB,QAAgD;CACrF,IAAI,OAAO,iBAAiBE,iCAAAA,6BAC1B,MAAM,IAAI,MAAM,uBAAuB,OAAO,OAAO,YAAY,EAAE,EAAE;CAEvE,IAAI,CAACF,UAAAA,QAAK,WAAW,OAAO,UAAU,KAAK,CAACA,UAAAA,QAAK,WAAW,OAAO,mBAAmB,GACpF,MAAM,IAAI,MAAM,qDAAqD;AAEzE;AAEA,SAAgB,qBAAqB,YAAoB,YAA0B;CACjF,IAAIA,UAAAA,QAAK,QAAQ,UAAU,MAAM,cAAcA,UAAAA,QAAK,SAAS,UAAU,MAAM,YAC3E,MAAM,IAAI,MAAM,8CAA8C;AAElE;;AAGA,SAAgB,iBACd,QACA,OACA,OACyB;CAEzB,KAAA,GADeC,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAChD,MAAM,OAAO,eAAe,MAAM,IAAI,MAAM,8CAA8C;CACnG,MAAM,SAAkB,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,WAAW,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC;CAC9F,IAAI,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,4BAA4B;CACnE,SAAS,QAAQ,CAAC,WAAW,YAAY,GAAG,KAAK;CACjD,IAAI,OAAO,YAAY,OAAO,cAAc,MAAM,IAAI,MAAM,6CAA6C;CACzG,IAAI,CAAC,SAAS,OAAO,UAAU,GAAG,MAAM,IAAI,MAAM,8BAA8B;CAChF,OAAO,OAAO;AAChB;;AAGA,SAAgB,kBAAkB,MAAc,SAAuE;CACrH,IAAI,CAAC,MAAM,OAAO;CAClB,MAAM,UAAU,QAAQ;CACxB,MAAM,UAAU,CAAC,WAAW,QAAQ,WAAW;CAC/C,MAAM,qBAAqB,QAAQ,sBAAsB;CACzD,IAAK,CAAC,WAAW,CAAC,QAAQ,SAAS,IAAI,KAAO,sBAAsB,qBAAqB,IAAI,IAAI,GAAI,OAAO;CAC5G,OAAO;AACT;AAEA,SAAgB,sBAAsB,OAAuB;CAC3D,OAAO,GAAG,MAAM;AAClB;AAEA,SAAgB,wBAAwB,OAAe,MAAc,OAAwB;CAC3F,OAAO,GAAG,MAAM,mBAAmB,KAAK,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpG;AAEA,SAAgB,eAAe,OAAe,OAAgD;CAC5F,OAAO,YAAY,GAAG,MAAM,iBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;AACvG;;AAGA,SAAgB,WAAW,KAAc,MAAsB;CAC7D,IAAI,CAAC,SAAS,GAAG,GAAG,MAAM,IAAI,MAAM,8BAA8B;CAClE,MAAM,OAAO,eAAe,IAAI,MAAM,MAAM;CAC5C,IAAI,SAAS,SAAS,SAAS,KAAK;EAAC;EAAQ;EAAW;EAAQ;EAAO;CAAK,GAAG,WAAW,KAAK,EAAE;CACjG,OAAO;AACT;AAEA,SAAgB,YACd,MACA,QACkB;CAClB,OAAO;EACL,UAAU;GAAE;GAAM,WAAW;GAAS;EAAO;EAC7C,QAAQ;GAAE,MAAM;GAAS,GAAG;EAAO;CACrC;AACF;;AAGA,SAAgB,aAAa,KAAiB,MAAc,MAAgC;CAC1F,IAAI,SAAS,qBAAqB,SAAS,OAAO;EAChD,SAAS,KAAK;GAAC;GAAQ;GAAO;EAAS,GAAG,WAAW,KAAK,EAAE;EAC5D,MAAM,MAAM,aAAa,IAAI,GAAG;EAChC,MAAM,UAAU,iBAAiB,IAAI,OAAO;EAC5C,MAAM,YAAY,SAAS,oBAAoB,SAAS;EACxD,MAAM,SAAS;GAAE;GAAK,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;EAAG;EACtD,OAAO;GACL,UAAU;IAAE;IAAM;IAAW;GAAO;GACpC,QAAQ;IAAE,MAAM;IAAW,GAAG;GAAO;EACvC;CACF;CACA,MAAM,IAAI,MAAM,+BAA+B,KAAK,EAAE;AACxD;AAEA,SAAgB,eAAe,iBAAqD;CAClF,OAAO,GAAG,KAAK,UAAU,EAAE,YAAY,gBAAgB,GAAG,MAAM,CAAC,EAAE;AACrE;AAEA,SAAgB,eAAe,QAA0C,YAAoB,UAA0B;CACrH,QAAA,GAAOA,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CACxB,OAAO,mBAAmB,CAAC,CAC3B,OAAO,OAAO,QAAQ,CAAC,CACvB,OAAO,IAAI,CAAC,CACZ,OAAO,OAAO,aAAa,CAAC,CAC5B,OAAO,IAAI,CAAC,CACZ,OAAO,UAAU,CAAC,CAClB,OAAO,IAAI,CAAC,CACZ,OAAO,QAAQ,CAAC,CAChB,OAAO,KAAK;AACjB;;AAGA,SAAgB,0BACd,UACA,YACA,qBACiD;CACjD,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;CACnC,MAAM,MAAM,eAAe,UAAU,KAAK;CAC1C,IAAI,IAAI,WAAW,IAAI,GAAG,OAAO;EAAE,MAAM;EAAY,WAAWD,UAAAA,QAAK,QAAQ,YAAY,GAAG;CAAE;CAC9F,MAAM,WAAW,yBAAyB,KAAK,YAAY,mBAAmB;CAC9E,IAAI,QAAQ,oBAAoB,IAAI,WAAW,iBAAiB,GAC9D,OAAO;EAAE,MAAM;EAAY,WAAWA,UAAAA,QAAK,QAAQ,QAAQ;CAAE;CAE/D,IAAI,QAAQ,oBAAoB,IAAI,WAAW,iBAAiB,GAC9D,OAAO;EAAE,MAAM;EAAqB,WAAWA,UAAAA,QAAK,QAAQ,QAAQ;CAAE;CAExE,MAAM,IAAI,MAAM,2DAA2D;AAC7E;;AAGA,SAAgB,wBAAwB,SAA0B;CAChE,IAAI,QAAQ,WAAW,IAAI,GAAG,OAAO;CACrC,IAAI,YAAY,OAAO,YAAY,QAAQ,WAAW,KAAK,OAAO,GAChE,MAAM,IAAI,MAAM,uEAAuE;CAEzF,OAAO;AACT;;;ACjSA,SAASG,oBAAkB,MAAc,WAAmB,OAAuB;CACjF,IAAI;CACJ,IAAI;EACF,gBAAgBC,QAAAA,QAAG,aAAa,SAAS;CAC3C,QAAQ;EACN,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB;CAC3C;CACA,IAAI,CAAC,SAAS,MAAM,aAAa,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,sCAAsC;CACnG,OAAO;AACT;AAEA,SAASC,mBAAiB,SAAiB,YAA4B;CACrE,IAAI,CAAC,wBAAwB,OAAO,GAAG,OAAO;CAC9C,MAAM,WAAWF,oBAAkB,YAAYG,UAAAA,QAAK,QAAQ,YAAY,OAAO,GAAG,SAAS;CAC3F,IAAI,CAACF,QAAAA,QAAG,SAAS,QAAQ,CAAC,CAAC,OAAO,GAAG,MAAM,IAAI,MAAM,wCAAwC;CAC7F,IAAI;EACF,QAAA,QAAG,WAAW,UAAUA,QAAAA,QAAG,UAAU,IAAI;CAC3C,QAAQ;EACN,MAAM,IAAI,MAAM,4CAA4C;CAC9D;CACA,OAAO;AACT;AAEA,SAASG,4BAA0B,UAAmB,YAAoB,qBAAqC;CAC7G,MAAM,cAAc,0BAA0B,UAAU,YAAY,mBAAmB;CACvF,IAAI,CAAC,aAAa,OAAO;CACzB,MAAM,WAAWJ,oBAAkB,YAAY,MAAM,YAAY,WAAW,KAAK;CACjF,IAAI,CAACC,QAAAA,QAAG,SAAS,QAAQ,CAAC,CAAC,YAAY,GAAG,MAAM,IAAI,MAAM,iCAAiC;CAC3F,OAAO;AACT;AAEA,SAASI,kBACP,KACA,YACA,qBACA,MACkB;CAClB,MAAM,OAAO,WAAW,KAAK,IAAI;CACjC,MAAM,cAAc;CACpB,IAAI,SAAS,SAAS,OAAO,aAAa,aAAa,MAAM,IAAI;CACjE,MAAM,UAAUH,mBAAiB,eAAe,YAAY,SAAS,SAAS,GAAG,UAAU;CAC3F,MAAM,OAAO,oBAAoB,YAAY,MAAM,MAAM,CAAC,EAAE,KAAK,SAC/D,yBAAyB,MAAM,YAAY,mBAAmB,CAChE;CACA,MAAM,MAAM,qBAAqB,YAAY,KAAK,YAAY,mBAAmB;CACjF,MAAM,MAAME,4BAA0B,YAAY,KAAK,YAAY,mBAAmB;CACtF,OAAO,YAAY,MAAM;EAAE;EAAS,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;EAAI;EAAK;CAAI,CAAC;AAC3E;AAEA,SAASE,4BAA0B,QAAgB,UAAkB,kBAAgC;CACnG,QAAA,QAAG,UAAU,kBAAkB;EAAE,MAAA;EAA8B,WAAW;CAAK,CAAC;CAChF,QAAA,QAAG,UAAU,kBAAA,GAAwC;CACrD,MAAM,gBAAgB,GAAG,OAAO,GAAG,QAAQ,IAAI,IAAA,GAAGC,YAAAA,WAAAA,CAAW,EAAE;CAC/D,IAAI;EACF,QAAA,QAAG,cAAc,eAAe,UAAU;GAAE,MAAM;GAAM,MAAA;EAAwB,CAAC;EACjF,IAAI;GACF,QAAA,QAAG,WAAW,eAAe,MAAM;EACrC,SAAS,OAAO;GACd,MAAM,OAAQ,MAAgC;GAC9C,IAAI,SAAS,YAAY,SAAS,SAAS,MAAM;GACjD,MAAM,OAAON,QAAAA,QAAG,UAAU,MAAM;GAChC,IAAI,KAAK,eAAe,KAAK,CAAC,KAAK,OAAO,KAAKA,QAAAA,QAAG,aAAa,QAAQ,MAAM,MAAM,UACjF,MAAM,IAAI,MAAM,iEAAiE;EAErF;EACA,QAAA,QAAG,UAAU,QAAA,GAAyB;CACxC,UAAU;EACR,QAAA,QAAG,OAAO,eAAe,EAAE,OAAO,KAAK,CAAC;CAC1C;AACF;;;;;;;;;;;AAYA,SAAgB,8BACd,QACA,SACgC;CAChC,MAAM,QAAQ,YAAY,MAAM;CAChC,IAAI;EACF,uBAAuB,MAAM;EAC7B,MAAM,aAAaA,QAAAA,QAAG,aAAa,OAAO,UAAU;EACpD,IAAI;GACF,MAAM,WAAWA,QAAAA,QAAG,UAAU,OAAO,mBAAmB;GACxD,IAAI,SAAS,eAAe,KAAK,CAAC,SAAS,YAAY,GACrD,MAAM,IAAI,MAAM,8CAA8C;EAElE,SAAS,OAAO;GACd,IAAK,MAAgC,SAAS,UAAU,MAAM;GAC9D,QAAA,QAAG,UAAU,OAAO,qBAAqB;IAAE,MAAA;IAA8B,WAAW;GAAK,CAAC;EAC5F;EACA,QAAA,QAAG,UAAU,OAAO,qBAAA,GAA2C;EAC/D,QAAA,QAAG,WAAW,OAAO,qBAAqBA,QAAAA,QAAG,UAAU,IAAI;EAC3D,MAAM,sBAAsBA,QAAAA,QAAG,aAAa,OAAO,mBAAmB;EACtE,MAAM,aAAaD,oBAAkB,YAAY,OAAO,YAAY,UAAU;EAC9E,qBAAqB,YAAY,UAAU;EAE3C,MAAM,UAAU,iBAAiB,QAAQC,QAAAA,QAAG,aAAa,UAAU,GAAG,KAAK;EAC3E,MAAM,kBAAkB,OAAO,OAAO,IAAI;EAC1C,MAAM,gBAAgB,OAAO,OAAO,IAAI;EACxC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAE/B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,OAAO,GAAG;GACvD,MAAM,cAAc,kBAAkB,MAAM,OAAO;GACnD,IAAI,gBAAgB,SAAS;IAC3B,YAAY,KAAK,sBAAsB,KAAK,CAAC;IAC7C;GACF;GACA,IAAI,gBAAgB,WAAW;IAC7B,eAAe,KAAK,IAAI;IACxB;GACF;GACA,IAAI;IACF,MAAM,aAAaI,kBAAgB,WAAW,YAAY,qBAAqB,IAAI;IACnF,gBAAgB,QAAQ,WAAW;IACnC,cAAc,QAAQ,WAAW;GACnC,SAAS,OAAO;IACd,eAAe,KAAK,IAAI;IACxB,YAAY,KAAK,wBAAwB,OAAO,MAAM,KAAK,CAAC;GAC9D;EACF;EAEA,MAAM,WAAW,eAAe,eAAe;EAC/C,MAAM,SAAS,mBAAmB,QAAQ,UAAU,QAAQ,gBAAgB;EAC5E,4BAA0B,QAAQ,UAAU,QAAQ,gBAAgB;EACpE,OAAO;GACL,cAAc;IAAE,MAAM;IAAQ,QAAQ;IAAY,UAAU,eAAe,QAAQ,YAAY,QAAQ;GAAE;GACzG,cAAc,EAAE,YAAY,cAAc;GAC1C,aAAa,OAAO,KAAK,eAAe;GACxC;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO,eAAe,OAAO,KAAK;CACpC;AACF;;;ACvIA,eAAe,kBACb,IACA,MACA,WACA,OACA,SACiB;CACjB,MAAM,OAAO,MAAM,GAAG,cAAc,WAAW,OAAO;CACtD,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB;CACvD,IAAI,CAAC,SAAS,MAAM,KAAK,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,sCAAsC;CAChG,OAAO,KAAK;AACd;AAEA,eAAe,iBACb,IACA,SACA,YACA,SACiB;CACjB,IAAI,CAAC,wBAAwB,OAAO,GAAG,OAAO;CAC9C,MAAM,WAAW,MAAM,kBAAkB,IAAI,YAAYG,UAAAA,QAAK,QAAQ,YAAY,OAAO,GAAG,WAAW,OAAO;CAC9G,KAAA,GAAIC,4BAAAA,WAAAA,CAAW,MAAM,GAAG,SAAS,UAAU,OAAO,CAAC,CAAC,CAAC,SAAS,QAC5D,MAAM,IAAI,MAAM,wCAAwC;CAG1D,MAAM,OAAO,MAAMC,4BAAAA,SAAS,SAAS,QAAQ;CAC7C,IAAI,SAAS,KAAA,MAAc,OAAO,QAAW,GAAG,MAAM,IAAI,MAAM,4CAA4C;CAC5G,OAAO;AACT;AAEA,eAAe,0BACb,IACA,UACA,YACA,qBACA,SACiB;CACjB,MAAM,cAAc,0BAA0B,UAAU,YAAY,mBAAmB;CACvF,IAAI,CAAC,aAAa,OAAO;CACzB,MAAM,WAAW,MAAM,kBAAkB,IAAI,YAAY,MAAM,YAAY,WAAW,OAAO,OAAO;CACpG,KAAA,GAAID,4BAAAA,WAAAA,CAAW,MAAM,GAAG,SAAS,UAAU,OAAO,CAAC,CAAC,CAAC,SAAS,aAC5D,MAAM,IAAI,MAAM,iCAAiC;CAEnD,OAAO;AACT;AAEA,eAAe,gBACb,IACA,KACA,YACA,qBACA,MACA,SAC2B;CAC3B,MAAM,OAAO,WAAW,KAAK,IAAI;CACjC,MAAM,cAAc;CACpB,IAAI,SAAS,SAAS,OAAO,aAAa,aAAa,MAAM,IAAI;CACjE,MAAM,UAAU,MAAM,iBAAiB,IAAI,eAAe,YAAY,SAAS,SAAS,GAAG,YAAY,OAAO;CAC9G,MAAM,OAAO,oBAAoB,YAAY,MAAM,MAAM,CAAC,EAAE,KAAK,SAC/D,yBAAyB,MAAM,YAAY,mBAAmB,CAChE;CACA,MAAM,MAAM,qBAAqB,YAAY,KAAK,YAAY,mBAAmB;CACjF,MAAM,MAAM,MAAM,0BAA0B,IAAI,YAAY,KAAK,YAAY,qBAAqB,OAAO;CACzG,OAAO,YAAY,MAAM;EAAE;EAAS,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;EAAI;EAAK;CAAI,CAAC;AAC3E;;AAGA,eAAe,2BAA2B,IAAgB,WAAmB,SAAmC;CAC9G,MAAM,OAAO,MAAM,GAAG,SAAS,WAAW,OAAO;CACjD,IAAI,KAAK,IACH;MAAA,KAAK,MAAM,SAAS,aAAa,MAAM,IAAI,MAAM,8CAA8C;CAAA,OAC9F,IAAI,KAAK,MAAM,SAAS,aAC7B,CAAA,GAAA,4BAAA,WAAA,CAAW,MAAM,GAAG,UAAU,WAAW,EAAE,WAAW,KAAK,GAAG,OAAO,CAAC;MAEtE,MAAM,KAAK;CAEb,MAAMC,4BAAAA,SAAS,QAAQ,WAAA,GAAiC;CACxD,QAAA,GAAOD,4BAAAA,WAAAA,CAAW,MAAM,GAAG,cAAc,WAAW,OAAO,CAAC;AAC9D;;;;;AAMA,eAAe,0BACb,IACA,QACA,UACA,kBACA,SACe;CACf,CAAA,GAAA,4BAAA,WAAA,CAAW,MAAM,GAAG,UAAU,kBAAkB,EAAE,WAAW,KAAK,GAAG,OAAO,CAAC;CAC7E,MAAMC,4BAAAA,SAAS,QAAQ,kBAAA,GAAwC;CAC/D,OAAA,GAAMC,4BAAAA,gBAAAA,CAAgB,IAAI,QAAQ,UAAU,OAAO;CACnD,MAAMD,4BAAAA,SAAS,QAAQ,QAAA,GAAyB;AAClD;;;;;;;;;;AAWA,eAAsB,mCACpB,IACA,QACA,SACA,SACyC;CACzC,MAAM,QAAQ,YAAY,MAAM;CAChC,IAAI;EACF,uBAAuB,MAAM;EAC7B,MAAM,cAAA,GAAaD,4BAAAA,WAAAA,CAAW,MAAM,GAAG,cAAc,OAAO,YAAY,OAAO,CAAC;EAChF,MAAM,sBAAsB,MAAM,2BAA2B,IAAI,OAAO,qBAAqB,OAAO;EACpG,MAAM,aAAa,MAAM,kBAAkB,IAAI,YAAY,OAAO,YAAY,YAAY,OAAO;EACjG,qBAAqB,YAAY,UAAU;EAG3C,MAAM,UAAU,iBAAiB,SAD3B,GAAQA,4BAAAA,WAAAA,CAAW,MAAM,GAAG,eAAe,YAAY,OAAO,CAC3B,GAAO,KAAK;EACrD,MAAM,kBAAkB,OAAO,OAAO,IAAI;EAC1C,MAAM,gBAAgB,OAAO,OAAO,IAAI;EACxC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAE/B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,OAAO,GAAG;GACvD,MAAM,cAAc,kBAAkB,MAAM,OAAO;GACnD,IAAI,gBAAgB,SAAS;IAC3B,YAAY,KAAK,sBAAsB,KAAK,CAAC;IAC7C;GACF;GACA,IAAI,gBAAgB,WAAW;IAC7B,eAAe,KAAK,IAAI;IACxB;GACF;GACA,IAAI;IACF,MAAM,aAAa,MAAM,gBAAgB,IAAI,WAAW,YAAY,qBAAqB,MAAM,OAAO;IACtG,gBAAgB,QAAQ,WAAW;IACnC,cAAc,QAAQ,WAAW;GACnC,SAAS,OAAO;IACd,eAAe,KAAK,IAAI;IACxB,YAAY,KAAK,wBAAwB,OAAO,MAAM,KAAK,CAAC;GAC9D;EACF;EAEA,MAAM,WAAW,eAAe,eAAe;EAC/C,MAAM,SAAS,mBAAmB,QAAQ,UAAU,QAAQ,gBAAgB;EAC5E,MAAM,0BAA0B,IAAI,QAAQ,UAAU,QAAQ,kBAAkB,OAAO;EACvF,OAAO;GACL,cAAc;IAAE,MAAM;IAAQ,QAAQ;IAAY,UAAU,eAAe,QAAQ,YAAY,QAAQ;GAAE;GACzG,cAAc,EAAE,YAAY,cAAc;GAC1C,aAAa,OAAO,KAAK,eAAe;GACxC;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO,eAAe,OAAO,KAAK;CACpC;AACF"}
1
+ {"version":3,"file":"agentPluginMcp.cjs","names":["path","createHash","AGENT_PLUGIN_MCP_SCHEMA_URL","realContainedPath","fs","normalizeCommand","path","normalizeWorkingDirectory","normalizeServer","writeStagedInternalConfig","randomUUID","createHash","AGENT_PLUGIN_MCP_SCHEMA_URL","path","getOrThrow","nodeHost","writeFileAtomic"],"sources":["../src/services/agentPluginMcp/normalize.ts","../src/services/agentPluginMcp/sync.ts","../src/services/agentPluginMcp/index.ts"],"sourcesContent":["/** Pure Agent Plugin MCP normalisation shared by the async API and the deprecated Node-only sync shim. */\nimport { createHash } from 'node:crypto';\nimport path from 'node:path';\n\nimport { AGENT_PLUGIN_MCP_SCHEMA_URL, type PoMcpAgentPluginProjectionSource } from '@agimon-ai/po-core/mcpProjection';\n\n/** Same token grammar as node:http `validateHeaderName` (RFC 9110 tchar). */\nconst HTTP_TOKEN = /^[\\^_`a-zA-Z\\-0-9!#$%&'*+.|~]+$/u;\n/** Same rejected characters as node:http `validateHeaderValue`. */\nconst INVALID_HEADER_VALUE_CHARACTER = /[^\\t\\x20-\\x7e\\x80-\\xff]/u;\nconst IPV4_OCTET = '(?:25[0-5]|2[0-4]\\\\d|1\\\\d\\\\d|[1-9]?\\\\d)';\nconst IPV4_ADDRESS = new RegExp(`^${IPV4_OCTET}(?:\\\\.${IPV4_OCTET}){3}$`, 'u');\n\nfunction isIPv4(value: string): boolean {\n return IPV4_ADDRESS.test(value);\n}\n\nexport const PRIVATE_FILE_MODE = 0o600;\nexport const PRIVATE_DIRECTORY_MODE = 0o700;\nexport const RESERVED_ENVIRONMENT_KEYS = new Set(['PLUGIN_ROOT', 'PLUGIN_DATA']);\nexport const PROXY_SERVER_ALIASES = new Set(['mcp-proxy', 'agiflow-proxy']);\n\nexport type JsonObject = Record<string, unknown>;\n\nexport interface AgentPluginMcpConfigSource {\n path: string;\n format: 'internal';\n cacheKey: string;\n}\n\nexport interface NormalizedAgentPluginMcpSource {\n /** Owner-only, content-addressed layer that bypasses Claude env interpolation. */\n configSource?: AgentPluginMcpConfigSource;\n /** Claude-compatible definitions for an external merged config. */\n claudeConfig: { mcpServers: Record<string, JsonObject> };\n serverNames: string[];\n droppedServers: string[];\n diagnostics: string[];\n}\n\nexport interface NormalizeAgentPluginMcpOptions {\n stagingDirectory: string;\n /** Empty and absent lists both mean keep every server. */\n allowedServers?: readonly string[];\n /** Po strips nested wrappers; external-only callers may opt out. */\n stripProxyWrappers?: boolean;\n}\n\nexport interface NormalizedServer {\n internal: JsonObject;\n claude: JsonObject;\n}\n\nexport function isObject(value: unknown): value is JsonObject {\n return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nexport function onlyKeys(value: JsonObject, allowed: readonly string[], label: string): void {\n const unexpected = Object.keys(value).find((key) => !allowed.includes(key));\n if (unexpected) throw new Error(`${label} contains unsupported field \"${unexpected}\"`);\n}\n\nexport function nonEmptyString(value: unknown, label: string): string {\n if (typeof value !== 'string' || value.length === 0) throw new Error(`${label} must be a non-empty string`);\n return value;\n}\n\nexport function optionalStringArray(value: unknown, label: string): string[] | undefined {\n if (value === undefined) return undefined;\n if (!Array.isArray(value)) throw new Error(`${label} must be an array of strings`);\n return value.map((item, index) => {\n if (typeof item !== 'string') throw new Error(`${label}[${index}] must be a string`);\n return item;\n });\n}\n\nfunction optionalStringRecord(value: unknown, label: string): Record<string, string> | undefined {\n if (value === undefined) return undefined;\n if (!isObject(value)) throw new Error(`${label} must be an object of string values`);\n return Object.fromEntries(\n Object.entries(value).map(([key, item]) => {\n if (typeof item !== 'string') throw new Error(`${label}.${key} must be a string`);\n return [key, item];\n }),\n );\n}\n\nexport function expandPluginPlaceholders(value: string, pluginRoot: string, pluginDataDirectory: string): string {\n // The portable contract is a single, non-recursive replacement pass. An\n // unrecognised placeholder remains literal and mcp-proxy must not reinterpret it.\n return value.replace(/\\$\\{PLUGIN_(ROOT|DATA)\\}/gu, (placeholder) =>\n placeholder === '${PLUGIN_ROOT}' ? pluginRoot : pluginDataDirectory,\n );\n}\n\nexport function isInside(root: string, candidate: string): boolean {\n const relative = path.relative(root, candidate);\n return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));\n}\n\nexport function normalizeEnvironment(\n value: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n): Record<string, string> {\n const declared = optionalStringRecord(value, 'env') ?? {};\n for (const key of Object.keys(declared)) {\n const reservedKey = process.platform === 'win32' ? key.toUpperCase() : key;\n if (RESERVED_ENVIRONMENT_KEYS.has(reservedKey)) {\n throw new Error(`env key \"${key}\" is reserved by Agent Plugins`);\n }\n }\n return {\n ...Object.fromEntries(\n Object.entries(declared).map(([key, item]) => [\n key,\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n ]),\n ),\n PLUGIN_ROOT: pluginRoot,\n PLUGIN_DATA: pluginDataDirectory,\n };\n}\n\nfunction isLoopbackHost(hostname: string): boolean {\n const bareHostname = hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname;\n if (bareHostname.toLowerCase() === 'localhost') return true;\n if (isIPv4(bareHostname)) return bareHostname.split('.')[0] === '127';\n return bareHostname === '::1';\n}\n\nexport function normalizeUrl(value: unknown): string {\n const raw = nonEmptyString(value, 'url');\n let parsed: URL;\n try {\n parsed = new URL(raw);\n } catch {\n throw new Error('url must be an absolute HTTP(S) URL');\n }\n if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {\n throw new Error('url must use http or https');\n }\n if (parsed.username || parsed.password) throw new Error('url must not contain user information');\n if (parsed.hash) throw new Error('url must not contain a fragment');\n if (parsed.protocol === 'http:' && !isLoopbackHost(parsed.hostname)) {\n throw new Error('non-loopback MCP URLs must use https');\n }\n return raw;\n}\n\nexport function normalizeHeaders(value: unknown): Record<string, string> | undefined {\n const headers = optionalStringRecord(value, 'headers');\n if (!headers) return undefined;\n const seen = new Set<string>();\n for (const [name, item] of Object.entries(headers)) {\n const canonical = name.toLowerCase();\n if (seen.has(canonical)) throw new Error(`headers contain duplicate name \"${name}\"`);\n seen.add(canonical);\n if (!HTTP_TOKEN.test(name) || INVALID_HEADER_VALUE_CHARACTER.test(item)) {\n throw new Error(`header \"${name}\" is invalid`);\n }\n }\n return headers;\n}\n\nexport function stagedInternalPath(\n source: PoMcpAgentPluginProjectionSource,\n contents: string,\n stagingDirectory: string,\n): string {\n const digest = createHash('sha256')\n .update(source.sourceId)\n .update('\\0')\n .update(source.contentDigest)\n .update('\\0')\n .update(contents)\n .digest('hex')\n .slice(0, 20);\n return path.join(stagingDirectory, `agent-plugin-mcp-${digest}.internal.json`);\n}\n\nexport function emptyResult(diagnostic: string): NormalizedAgentPluginMcpSource {\n return {\n claudeConfig: { mcpServers: {} },\n serverNames: [],\n droppedServers: [],\n diagnostics: [diagnostic],\n };\n}\n\nexport function sourceLabel(source: PoMcpAgentPluginProjectionSource): string {\n return `Agent Plugin MCP source \"${source.sourceId}\"`;\n}\n\n/** Checks the projection identity before any file is touched. */\nexport function assertProjectionSource(source: PoMcpAgentPluginProjectionSource): void {\n if (source.mcpSchemaUrl !== AGENT_PLUGIN_MCP_SCHEMA_URL) {\n throw new Error(`unsupported schema \"${String(source.mcpSchemaUrl)}\"`);\n }\n if (!path.isAbsolute(source.pluginRoot) || !path.isAbsolute(source.pluginDataDirectory)) {\n throw new Error('pluginRoot and pluginDataDirectory must be absolute');\n }\n}\n\nexport function assertRootConfigPath(configPath: string, pluginRoot: string): void {\n if (path.dirname(configPath) !== pluginRoot || path.basename(configPath) !== 'mcp.json') {\n throw new Error('portable plugin config must be root mcp.json');\n }\n}\n\n/** Verifies the digest and document shape of the raw mcp.json bytes; returns its server map. */\nexport function parseMcpDocument(\n source: PoMcpAgentPluginProjectionSource,\n bytes: Uint8Array,\n label: string,\n): Record<string, unknown> {\n const digest = createHash('sha256').update(bytes).digest('hex');\n if (digest !== source.contentDigest) throw new Error('content digest does not match the projection');\n const parsed: unknown = JSON.parse(new TextDecoder('utf-8', { ignoreBOM: true }).decode(bytes));\n if (!isObject(parsed)) throw new Error('document must be an object');\n onlyKeys(parsed, ['$schema', 'mcpServers'], label);\n if (parsed.$schema !== source.mcpSchemaUrl) throw new Error('$schema does not match the projected schema');\n if (!isObject(parsed.mcpServers)) throw new Error('mcpServers must be an object');\n return parsed.mcpServers;\n}\n\n/** Whether a declared server is skipped (empty name), dropped by the allowlist or wrapper rule, or normalised. */\nexport function serverDisposition(name: string, options: NormalizeAgentPluginMcpOptions): 'empty' | 'dropped' | 'keep' {\n if (!name) return 'empty';\n const allowed = options.allowedServers;\n const keepAll = !allowed || allowed.length === 0;\n const stripProxyWrappers = options.stripProxyWrappers ?? true;\n if ((!keepAll && !allowed.includes(name)) || (stripProxyWrappers && PROXY_SERVER_ALIASES.has(name))) return 'dropped';\n return 'keep';\n}\n\nexport function emptyServerDiagnostic(label: string): string {\n return `${label} contains an empty server name; that entry was skipped.`;\n}\n\nexport function skippedServerDiagnostic(label: string, name: string, error: unknown): string {\n return `${label} skipped server \"${name}\": ${error instanceof Error ? error.message : String(error)}`;\n}\n\nexport function disabledResult(label: string, error: unknown): NormalizedAgentPluginMcpSource {\n return emptyResult(`${label} was disabled: ${error instanceof Error ? error.message : String(error)}`);\n}\n\n/** The declared transport of one server; stdio declarations are also checked for unsupported fields. */\nexport function serverType(raw: unknown, name: string): string {\n if (!isObject(raw)) throw new Error('definition must be an object');\n const type = nonEmptyString(raw.type, 'type');\n if (type === 'stdio') onlyKeys(raw, ['type', 'command', 'args', 'env', 'cwd'], `server \"${name}\"`);\n return type;\n}\n\nexport function stdioServer(\n name: string,\n config: { command: string; args?: string[]; env: Record<string, string>; cwd: string },\n): NormalizedServer {\n return {\n internal: { name, transport: 'stdio', config },\n claude: { type: 'stdio', ...config },\n };\n}\n\n/** A streamable-http or sse server; any other type is unsupported. */\nexport function remoteServer(raw: JsonObject, name: string, type: string): NormalizedServer {\n if (type === 'streamable-http' || type === 'sse') {\n onlyKeys(raw, ['type', 'url', 'headers'], `server \"${name}\"`);\n const url = normalizeUrl(raw.url);\n const headers = normalizeHeaders(raw.headers);\n const transport = type === 'streamable-http' ? 'http' : 'sse';\n const config = { url, ...(headers ? { headers } : {}) };\n return {\n internal: { name, transport, config },\n claude: { type: transport, ...config },\n };\n }\n throw new Error(`unsupported transport type \"${type}\"`);\n}\n\nexport function stagedContents(internalServers: Record<string, JsonObject>): string {\n return `${JSON.stringify({ mcpServers: internalServers }, null, 2)}\\n`;\n}\n\nexport function stagedCacheKey(source: PoMcpAgentPluginProjectionSource, configPath: string, contents: string): string {\n return createHash('sha256')\n .update('agent-plugin-v1\\0')\n .update(source.sourceId)\n .update('\\0')\n .update(source.contentDigest)\n .update('\\0')\n .update(configPath)\n .update('\\0')\n .update(contents)\n .digest('hex');\n}\n\n/** The containment base and expanded path of a declared cwd, or undefined when the plugin root is the default. */\nexport function workingDirectoryCandidate(\n declared: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n): { base: string; candidate: string } | undefined {\n if (declared === undefined) return undefined;\n const cwd = nonEmptyString(declared, 'cwd');\n if (cwd.startsWith('./')) return { base: pluginRoot, candidate: path.resolve(pluginRoot, cwd) };\n const expanded = expandPluginPlaceholders(cwd, pluginRoot, pluginDataDirectory);\n if (cwd === '${PLUGIN_ROOT}' || cwd.startsWith('${PLUGIN_ROOT}/')) {\n return { base: pluginRoot, candidate: path.resolve(expanded) };\n }\n if (cwd === '${PLUGIN_DATA}' || cwd.startsWith('${PLUGIN_DATA}/')) {\n return { base: pluginDataDirectory, candidate: path.resolve(expanded) };\n }\n throw new Error('cwd must start with ./, ${PLUGIN_ROOT}, or ${PLUGIN_DATA}');\n}\n\n/** Rejects a command that is neither a bare executable name nor a ./ path; true when it must be resolved. */\nexport function isPluginRelativeCommand(command: string): boolean {\n if (command.startsWith('./')) return true;\n if (command === '.' || command === '..' || /[\\s/\\\\]/u.test(command)) {\n throw new Error('command must be a bare executable name or a ./ path inside the plugin');\n }\n return false;\n}\n","import { createHash, randomUUID } from 'node:crypto';\n// sync: The normalization helpers preserve the exported Node-only normalizeAgentPluginMcpSource signature.\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport {\n AGENT_PLUGIN_MCP_SCHEMA_URL,\n type PoMcpAgentPluginProjectionSource,\n type PoMcpProjectionSource,\n} from '@agimon-ai/po-core/mcpProjection';\n\nimport type { PluginEntry } from '../../types/domains';\nimport {\n type JsonObject,\n type NormalizeAgentPluginMcpOptions,\n type NormalizedAgentPluginMcpSource,\n type NormalizedServer,\n PRIVATE_DIRECTORY_MODE,\n PRIVATE_FILE_MODE,\n assertProjectionSource,\n assertRootConfigPath,\n disabledResult,\n emptyServerDiagnostic,\n expandPluginPlaceholders,\n isInside,\n isPluginRelativeCommand,\n nonEmptyString,\n normalizeEnvironment,\n optionalStringArray,\n parseMcpDocument,\n remoteServer,\n serverDisposition,\n serverType,\n skippedServerDiagnostic,\n sourceLabel,\n stagedCacheKey,\n stagedContents,\n stagedInternalPath,\n stdioServer,\n workingDirectoryCandidate,\n} from './normalize';\n\nfunction realContainedPath(root: string, candidate: string, label: string): string {\n let realCandidate: string;\n try {\n realCandidate = fs.realpathSync(candidate);\n } catch {\n throw new Error(`${label} does not exist`);\n }\n if (!isInside(root, realCandidate)) throw new Error(`${label} escapes its allowed plugin directory`);\n return realCandidate;\n}\n\nfunction normalizeCommand(command: string, pluginRoot: string): string {\n if (!isPluginRelativeCommand(command)) return command;\n const resolved = realContainedPath(pluginRoot, path.resolve(pluginRoot, command), 'command');\n if (!fs.statSync(resolved).isFile()) throw new Error('command must resolve to a regular file');\n try {\n fs.accessSync(resolved, fs.constants.X_OK);\n } catch {\n throw new Error('command must resolve to an executable file');\n }\n return resolved;\n}\n\nfunction normalizeWorkingDirectory(declared: unknown, pluginRoot: string, pluginDataDirectory: string): string {\n const declaredCwd = workingDirectoryCandidate(declared, pluginRoot, pluginDataDirectory);\n if (!declaredCwd) return pluginRoot;\n const resolved = realContainedPath(declaredCwd.base, declaredCwd.candidate, 'cwd');\n if (!fs.statSync(resolved).isDirectory()) throw new Error('cwd must resolve to a directory');\n return resolved;\n}\n\nfunction normalizeServer(\n raw: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n name: string,\n): NormalizedServer {\n const type = serverType(raw, name);\n const declaration = raw as JsonObject;\n if (type !== 'stdio') return remoteServer(declaration, name, type);\n const command = normalizeCommand(nonEmptyString(declaration.command, 'command'), pluginRoot);\n const args = optionalStringArray(declaration.args, 'args')?.map((item) =>\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n );\n const env = normalizeEnvironment(declaration.env, pluginRoot, pluginDataDirectory);\n const cwd = normalizeWorkingDirectory(declaration.cwd, pluginRoot, pluginDataDirectory);\n return stdioServer(name, { command, ...(args ? { args } : {}), env, cwd });\n}\n\nfunction writeStagedInternalConfig(target: string, contents: string, stagingDirectory: string): void {\n fs.mkdirSync(stagingDirectory, { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n fs.chmodSync(stagingDirectory, PRIVATE_DIRECTORY_MODE);\n const temporaryPath = `${target}.${process.pid}-${randomUUID()}.tmp`;\n try {\n fs.writeFileSync(temporaryPath, contents, { flag: 'wx', mode: PRIVATE_FILE_MODE });\n try {\n fs.renameSync(temporaryPath, target);\n } catch (error) {\n const code = (error as NodeJS.ErrnoException).code;\n if (code !== 'EEXIST' && code !== 'EPERM') throw error;\n const stat = fs.lstatSync(target);\n if (stat.isSymbolicLink() || !stat.isFile() || fs.readFileSync(target, 'utf8') !== contents) {\n throw new Error('content-addressed staging path is occupied by different content');\n }\n }\n fs.chmodSync(target, PRIVATE_FILE_MODE);\n } finally {\n fs.rmSync(temporaryPath, { force: true });\n }\n}\n\n/**\n * Validates one Agent Plugins v1 `mcp.json` and stages a native mcp-proxy layer.\n *\n * Server validation is isolated: one malformed server is diagnosed and skipped.\n * Document/schema, source identity, or plugin-boundary failures reject the whole\n * source. Only the two portable plugin placeholders are expanded; the staged\n * layer is tagged `internal`, so legacy `${ENV}` interpolation cannot run again.\n *\n * @deprecated Node-only sync shim; use normalizeAgentPluginMcpSourceAsync. Removed in M2.\n */\nexport function normalizeAgentPluginMcpSource(\n source: PoMcpAgentPluginProjectionSource,\n options: NormalizeAgentPluginMcpOptions,\n): NormalizedAgentPluginMcpSource {\n const label = sourceLabel(source);\n try {\n assertProjectionSource(source);\n const pluginRoot = fs.realpathSync(source.pluginRoot);\n try {\n const dataStat = fs.lstatSync(source.pluginDataDirectory);\n if (dataStat.isSymbolicLink() || !dataStat.isDirectory()) {\n throw new Error('pluginDataDirectory must be a real directory');\n }\n } catch (error) {\n if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw error;\n fs.mkdirSync(source.pluginDataDirectory, { mode: PRIVATE_DIRECTORY_MODE, recursive: true });\n }\n fs.chmodSync(source.pluginDataDirectory, PRIVATE_DIRECTORY_MODE);\n fs.accessSync(source.pluginDataDirectory, fs.constants.W_OK);\n const pluginDataDirectory = fs.realpathSync(source.pluginDataDirectory);\n const configPath = realContainedPath(pluginRoot, source.configPath, 'mcp.json');\n assertRootConfigPath(configPath, pluginRoot);\n\n const servers = parseMcpDocument(source, fs.readFileSync(configPath), label);\n const internalServers = Object.create(null) as Record<string, JsonObject>;\n const claudeServers = Object.create(null) as Record<string, JsonObject>;\n const droppedServers: string[] = [];\n const diagnostics: string[] = [];\n\n for (const [name, rawServer] of Object.entries(servers)) {\n const disposition = serverDisposition(name, options);\n if (disposition === 'empty') {\n diagnostics.push(emptyServerDiagnostic(label));\n continue;\n }\n if (disposition === 'dropped') {\n droppedServers.push(name);\n continue;\n }\n try {\n const normalized = normalizeServer(rawServer, pluginRoot, pluginDataDirectory, name);\n internalServers[name] = normalized.internal;\n claudeServers[name] = normalized.claude;\n } catch (error) {\n droppedServers.push(name);\n diagnostics.push(skippedServerDiagnostic(label, name, error));\n }\n }\n\n const contents = stagedContents(internalServers);\n const target = stagedInternalPath(source, contents, options.stagingDirectory);\n writeStagedInternalConfig(target, contents, options.stagingDirectory);\n return {\n configSource: { path: target, format: 'internal', cacheKey: stagedCacheKey(source, configPath, contents) },\n claudeConfig: { mcpServers: claudeServers },\n serverNames: Object.keys(internalServers),\n droppedServers,\n diagnostics,\n };\n } catch (error) {\n return disabledResult(label, error);\n }\n}\n\nconst AGENT_PLUGIN_SCHEMA = 'https://agent-plugins.org/schemas/1.0.0/plugin.schema.json';\n\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nasync function stablePluginIdentity(entry: PluginEntry): Promise<string> {\n const source = entry.source;\n const identity =\n source?.type === 'git'\n ? ['git', source.url, source.path ?? '']\n : source?.type === 'npm'\n ? ['npm', source.registry ?? '', source.package]\n : ['local', await fs.promises.realpath(entry.directory)];\n return createHash('sha256').update(JSON.stringify(identity)).digest('hex');\n}\n\nasync function rootAgentPluginSchema(entry: PluginEntry): Promise<string | undefined> {\n const manifestPath = path.join(entry.directory, 'plugin.json');\n if (entry.manifest?.path === manifestPath && entry.manifest.agentPluginSchema === AGENT_PLUGIN_SCHEMA) {\n return AGENT_PLUGIN_SCHEMA;\n }\n try {\n const stat = await fs.promises.lstat(manifestPath);\n if (stat.isSymbolicLink() || !stat.isFile()) return undefined;\n const parsed = JSON.parse(await fs.promises.readFile(manifestPath, 'utf8')) as unknown;\n return isPlainObject(parsed) && parsed.$schema === AGENT_PLUGIN_SCHEMA ? AGENT_PLUGIN_SCHEMA : undefined;\n } catch {\n return undefined;\n }\n}\n\n/** One plugin's MCP config as a projection source, or nothing when it ships none. Shared by sync and settings. */\nexport async function pluginMcpSource(\n entry: PluginEntry,\n pluginDataRoot: string,\n): Promise<PoMcpProjectionSource | undefined> {\n if (entry.mcp === false) return undefined;\n const pluginRoot = await fs.promises.realpath(entry.directory);\n const agentPlugin = (await rootAgentPluginSchema(entry)) === AGENT_PLUGIN_SCHEMA;\n const configPath = path.join(pluginRoot, agentPlugin ? 'mcp.json' : '.mcp.json');\n let stat: fs.Stats;\n try {\n stat = await fs.promises.lstat(configPath);\n } catch (error) {\n if ((error as NodeJS.ErrnoException).code === 'ENOENT') return undefined;\n throw error;\n }\n if (!stat.isFile() || stat.isSymbolicLink()) return undefined;\n const content = await fs.promises.readFile(configPath);\n const contentDigest = createHash('sha256').update(content).digest('hex');\n const pluginId = await stablePluginIdentity(entry);\n const sourceId = `plugin:${pluginId}`;\n if (!agentPlugin) return { sourceId, owner: 'plugin', format: 'native', configPath, contentDigest };\n return {\n sourceId,\n owner: 'plugin',\n format: 'agent-plugin-v1',\n configPath,\n contentDigest,\n pluginId,\n pluginRoot,\n pluginDataDirectory: path.join(pluginDataRoot, pluginId),\n mcpSchemaUrl: AGENT_PLUGIN_MCP_SCHEMA_URL,\n };\n}\n","import path from 'node:path';\n\nimport type { PoMcpAgentPluginProjectionSource } from '@agimon-ai/po-core/mcpProjection';\nimport { type FileSystem, getOrThrow, nodeHost, writeFileAtomic } from '@agimon-ai/po-core/platform';\n\nimport {\n type JsonObject,\n type NormalizeAgentPluginMcpOptions,\n type NormalizedAgentPluginMcpSource,\n type NormalizedServer,\n PRIVATE_DIRECTORY_MODE,\n PRIVATE_FILE_MODE,\n assertProjectionSource,\n assertRootConfigPath,\n disabledResult,\n emptyServerDiagnostic,\n expandPluginPlaceholders,\n isInside,\n isPluginRelativeCommand,\n nonEmptyString,\n normalizeEnvironment,\n optionalStringArray,\n parseMcpDocument,\n remoteServer,\n serverDisposition,\n serverType,\n skippedServerDiagnostic,\n sourceLabel,\n stagedCacheKey,\n stagedContents,\n stagedInternalPath,\n stdioServer,\n workingDirectoryCandidate,\n} from './normalize';\n\nexport type {\n AgentPluginMcpConfigSource,\n NormalizeAgentPluginMcpOptions,\n NormalizedAgentPluginMcpSource,\n} from './normalize';\nexport { normalizeAgentPluginMcpSource, pluginMcpSource } from './sync';\n\ntype Context = Parameters<FileSystem['readTextFile']>[1];\n\nasync function realContainedPath(\n fs: FileSystem,\n root: string,\n candidate: string,\n label: string,\n context: Context,\n): Promise<string> {\n const real = await fs.canonicalPath(candidate, context);\n if (!real.ok) throw new Error(`${label} does not exist`);\n if (!isInside(root, real.value)) throw new Error(`${label} escapes its allowed plugin directory`);\n return real.value;\n}\n\nasync function normalizeCommand(\n fs: FileSystem,\n command: string,\n pluginRoot: string,\n context: Context,\n): Promise<string> {\n if (!isPluginRelativeCommand(command)) return command;\n const resolved = await realContainedPath(fs, pluginRoot, path.resolve(pluginRoot, command), 'command', context);\n if (getOrThrow(await fs.fileInfo(resolved, context)).kind !== 'file') {\n throw new Error('command must resolve to a regular file');\n }\n // Execute bits stand in for access(X_OK); the edge has no modes, so nodeHost reports none and the check is skipped.\n const mode = await nodeHost.fileMode(resolved);\n if (mode !== undefined && (mode & 0o111) === 0) throw new Error('command must resolve to an executable file');\n return resolved;\n}\n\nasync function normalizeWorkingDirectory(\n fs: FileSystem,\n declared: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n context: Context,\n): Promise<string> {\n const declaredCwd = workingDirectoryCandidate(declared, pluginRoot, pluginDataDirectory);\n if (!declaredCwd) return pluginRoot;\n const resolved = await realContainedPath(fs, declaredCwd.base, declaredCwd.candidate, 'cwd', context);\n if (getOrThrow(await fs.fileInfo(resolved, context)).kind !== 'directory') {\n throw new Error('cwd must resolve to a directory');\n }\n return resolved;\n}\n\nasync function normalizeServer(\n fs: FileSystem,\n raw: unknown,\n pluginRoot: string,\n pluginDataDirectory: string,\n name: string,\n context: Context,\n): Promise<NormalizedServer> {\n const type = serverType(raw, name);\n const declaration = raw as JsonObject;\n if (type !== 'stdio') return remoteServer(declaration, name, type);\n const command = await normalizeCommand(fs, nonEmptyString(declaration.command, 'command'), pluginRoot, context);\n const args = optionalStringArray(declaration.args, 'args')?.map((item) =>\n expandPluginPlaceholders(item, pluginRoot, pluginDataDirectory),\n );\n const env = normalizeEnvironment(declaration.env, pluginRoot, pluginDataDirectory);\n const cwd = await normalizeWorkingDirectory(fs, declaration.cwd, pluginRoot, pluginDataDirectory, context);\n return stdioServer(name, { command, ...(args ? { args } : {}), env, cwd });\n}\n\n/** Owner-only plugin data directory; a symbolic link or non-directory rejects the source. */\nasync function preparePluginDataDirectory(fs: FileSystem, directory: string, context: Context): Promise<string> {\n const info = await fs.fileInfo(directory, context);\n if (info.ok) {\n if (info.value.kind !== 'directory') throw new Error('pluginDataDirectory must be a real directory');\n } else if (info.error.code === 'not_found') {\n getOrThrow(await fs.createDir(directory, { recursive: true }, context));\n } else {\n throw info.error;\n }\n await nodeHost.setMode(directory, PRIVATE_DIRECTORY_MODE);\n return getOrThrow(await fs.canonicalPath(directory, context));\n}\n\n/**\n * Content-addressed and owner-only. The name hashes the contents, so replacing an\n * existing staged file through a uniquely named temporary file never changes what it holds.\n */\nasync function writeStagedInternalConfig(\n fs: FileSystem,\n target: string,\n contents: string,\n stagingDirectory: string,\n context: Context,\n): Promise<void> {\n getOrThrow(await fs.createDir(stagingDirectory, { recursive: true }, context));\n await nodeHost.setMode(stagingDirectory, PRIVATE_DIRECTORY_MODE);\n await writeFileAtomic(fs, target, contents, context);\n await nodeHost.setMode(target, PRIVATE_FILE_MODE);\n}\n\n/**\n * Validates one Agent Plugins v1 `mcp.json` and stages a native mcp-proxy layer,\n * reading and writing through the injected file system.\n *\n * Server validation is isolated: one malformed server is diagnosed and skipped.\n * Document/schema, source identity, or plugin-boundary failures reject the whole\n * source. Only the two portable plugin placeholders are expanded; the staged\n * layer is tagged `internal`, so legacy `${ENV}` interpolation cannot run again.\n */\nexport async function normalizeAgentPluginMcpSourceAsync(\n fs: FileSystem,\n source: PoMcpAgentPluginProjectionSource,\n options: NormalizeAgentPluginMcpOptions,\n context: Context,\n): Promise<NormalizedAgentPluginMcpSource> {\n const label = sourceLabel(source);\n try {\n assertProjectionSource(source);\n const pluginRoot = getOrThrow(await fs.canonicalPath(source.pluginRoot, context));\n const pluginDataDirectory = await preparePluginDataDirectory(fs, source.pluginDataDirectory, context);\n const configPath = await realContainedPath(fs, pluginRoot, source.configPath, 'mcp.json', context);\n assertRootConfigPath(configPath, pluginRoot);\n\n const bytes = getOrThrow(await fs.readBinaryFile(configPath, context));\n const servers = parseMcpDocument(source, bytes, label);\n const internalServers = Object.create(null) as Record<string, JsonObject>;\n const claudeServers = Object.create(null) as Record<string, JsonObject>;\n const droppedServers: string[] = [];\n const diagnostics: string[] = [];\n\n for (const [name, rawServer] of Object.entries(servers)) {\n const disposition = serverDisposition(name, options);\n if (disposition === 'empty') {\n diagnostics.push(emptyServerDiagnostic(label));\n continue;\n }\n if (disposition === 'dropped') {\n droppedServers.push(name);\n continue;\n }\n try {\n const normalized = await normalizeServer(fs, rawServer, pluginRoot, pluginDataDirectory, name, context);\n internalServers[name] = normalized.internal;\n claudeServers[name] = normalized.claude;\n } catch (error) {\n droppedServers.push(name);\n diagnostics.push(skippedServerDiagnostic(label, name, error));\n }\n }\n\n const contents = stagedContents(internalServers);\n const target = stagedInternalPath(source, contents, options.stagingDirectory);\n await writeStagedInternalConfig(fs, target, contents, options.stagingDirectory, context);\n return {\n configSource: { path: target, format: 'internal', cacheKey: stagedCacheKey(source, configPath, contents) },\n claudeConfig: { mcpServers: claudeServers },\n serverNames: Object.keys(internalServers),\n droppedServers,\n diagnostics,\n };\n } catch (error) {\n return disabledResult(label, error);\n }\n}\n"],"mappings":";;;;;;;;;;;;AAOA,MAAM,aAAa;;AAEnB,MAAM,iCAAiC;AACvC,MAAM,aAAa;AACnB,MAAM,eAAe,IAAI,OAAO,IAAI,WAAW,QAAQ,WAAW,QAAQ,GAAG;AAE7E,SAAS,OAAO,OAAwB;CACtC,OAAO,aAAa,KAAK,KAAK;AAChC;AAIA,MAAa,4CAA4B,IAAI,IAAI,CAAC,eAAe,aAAa,CAAC;AAC/E,MAAa,uCAAuB,IAAI,IAAI,CAAC,aAAa,eAAe,CAAC;AAiC1E,SAAgB,SAAS,OAAqC;CAC5D,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAgB,SAAS,OAAmB,SAA4B,OAAqB;CAC3F,MAAM,aAAa,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,SAAS,GAAG,CAAC;CAC1E,IAAI,YAAY,MAAM,IAAI,MAAM,GAAG,MAAM,+BAA+B,WAAW,EAAE;AACvF;AAEA,SAAgB,eAAe,OAAgB,OAAuB;CACpE,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CAC1G,OAAO;AACT;AAEA,SAAgB,oBAAoB,OAAgB,OAAqC;CACvF,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,6BAA6B;CACjF,OAAO,MAAM,KAAK,MAAM,UAAU;EAChC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,mBAAmB;EACnF,OAAO;CACT,CAAC;AACH;AAEA,SAAS,qBAAqB,OAAgB,OAAmD;CAC/F,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,SAAS,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,oCAAoC;CACnF,OAAO,OAAO,YACZ,OAAO,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU;EACzC,IAAI,OAAO,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,MAAM,GAAG,IAAI,kBAAkB;EAChF,OAAO,CAAC,KAAK,IAAI;CACnB,CAAC,CACH;AACF;AAEA,SAAgB,yBAAyB,OAAe,YAAoB,qBAAqC;CAG/G,OAAO,MAAM,QAAQ,+BAA+B,gBAClD,gBAAgB,mBAAmB,aAAa,mBAClD;AACF;AAEA,SAAgB,SAAS,MAAc,WAA4B;CACjE,MAAM,WAAWA,UAAAA,QAAK,SAAS,MAAM,SAAS;CAC9C,OAAO,aAAa,MAAO,CAAC,SAAS,WAAW,KAAKA,UAAAA,QAAK,KAAK,KAAK,aAAa,QAAQ,CAACA,UAAAA,QAAK,WAAW,QAAQ;AACpH;AAEA,SAAgB,qBACd,OACA,YACA,qBACwB;CACxB,MAAM,WAAW,qBAAqB,OAAO,KAAK,KAAK,CAAC;CACxD,KAAK,MAAM,OAAO,OAAO,KAAK,QAAQ,GAAG;EACvC,MAAM,cAAc,QAAQ,aAAa,UAAU,IAAI,YAAY,IAAI;EACvE,IAAI,0BAA0B,IAAI,WAAW,GAC3C,MAAM,IAAI,MAAM,YAAY,IAAI,+BAA+B;CAEnE;CACA,OAAO;EACL,GAAG,OAAO,YACR,OAAO,QAAQ,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU,CAC5C,KACA,yBAAyB,MAAM,YAAY,mBAAmB,CAChE,CAAC,CACH;EACA,aAAa;EACb,aAAa;CACf;AACF;AAEA,SAAS,eAAe,UAA2B;CACjD,MAAM,eAAe,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG,IAAI,SAAS,MAAM,GAAG,EAAE,IAAI;CAClG,IAAI,aAAa,YAAY,MAAM,aAAa,OAAO;CACvD,IAAI,OAAO,YAAY,GAAG,OAAO,aAAa,MAAM,GAAG,CAAC,CAAC,OAAO;CAChE,OAAO,iBAAiB;AAC1B;AAEA,SAAgB,aAAa,OAAwB;CACnD,MAAM,MAAM,eAAe,OAAO,KAAK;CACvC,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,GAAG;CACtB,QAAQ;EACN,MAAM,IAAI,MAAM,qCAAqC;CACvD;CACA,IAAI,OAAO,aAAa,WAAW,OAAO,aAAa,UACrD,MAAM,IAAI,MAAM,4BAA4B;CAE9C,IAAI,OAAO,YAAY,OAAO,UAAU,MAAM,IAAI,MAAM,uCAAuC;CAC/F,IAAI,OAAO,MAAM,MAAM,IAAI,MAAM,iCAAiC;CAClE,IAAI,OAAO,aAAa,WAAW,CAAC,eAAe,OAAO,QAAQ,GAChE,MAAM,IAAI,MAAM,sCAAsC;CAExD,OAAO;AACT;AAEA,SAAgB,iBAAiB,OAAoD;CACnF,MAAM,UAAU,qBAAqB,OAAO,SAAS;CACrD,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,OAAO,GAAG;EAClD,MAAM,YAAY,KAAK,YAAY;EACnC,IAAI,KAAK,IAAI,SAAS,GAAG,MAAM,IAAI,MAAM,mCAAmC,KAAK,EAAE;EACnF,KAAK,IAAI,SAAS;EAClB,IAAI,CAAC,WAAW,KAAK,IAAI,KAAK,+BAA+B,KAAK,IAAI,GACpE,MAAM,IAAI,MAAM,WAAW,KAAK,aAAa;CAEjD;CACA,OAAO;AACT;AAEA,SAAgB,mBACd,QACA,UACA,kBACQ;CACR,MAAM,UAAA,GAASC,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAChC,OAAO,OAAO,QAAQ,CAAC,CACvB,OAAO,IAAI,CAAC,CACZ,OAAO,OAAO,aAAa,CAAC,CAC5B,OAAO,IAAI,CAAC,CACZ,OAAO,QAAQ,CAAC,CAChB,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EAAE;CACd,OAAOD,UAAAA,QAAK,KAAK,kBAAkB,oBAAoB,OAAO,eAAe;AAC/E;AAEA,SAAgB,YAAY,YAAoD;CAC9E,OAAO;EACL,cAAc,EAAE,YAAY,CAAC,EAAE;EAC/B,aAAa,CAAC;EACd,gBAAgB,CAAC;EACjB,aAAa,CAAC,UAAU;CAC1B;AACF;AAEA,SAAgB,YAAY,QAAkD;CAC5E,OAAO,4BAA4B,OAAO,SAAS;AACrD;;AAGA,SAAgB,uBAAuB,QAAgD;CACrF,IAAI,OAAO,iBAAiBE,iCAAAA,6BAC1B,MAAM,IAAI,MAAM,uBAAuB,OAAO,OAAO,YAAY,EAAE,EAAE;CAEvE,IAAI,CAACF,UAAAA,QAAK,WAAW,OAAO,UAAU,KAAK,CAACA,UAAAA,QAAK,WAAW,OAAO,mBAAmB,GACpF,MAAM,IAAI,MAAM,qDAAqD;AAEzE;AAEA,SAAgB,qBAAqB,YAAoB,YAA0B;CACjF,IAAIA,UAAAA,QAAK,QAAQ,UAAU,MAAM,cAAcA,UAAAA,QAAK,SAAS,UAAU,MAAM,YAC3E,MAAM,IAAI,MAAM,8CAA8C;AAElE;;AAGA,SAAgB,iBACd,QACA,OACA,OACyB;CAEzB,KAAA,GADeC,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAChD,MAAM,OAAO,eAAe,MAAM,IAAI,MAAM,8CAA8C;CACnG,MAAM,SAAkB,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,WAAW,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC;CAC9F,IAAI,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,4BAA4B;CACnE,SAAS,QAAQ,CAAC,WAAW,YAAY,GAAG,KAAK;CACjD,IAAI,OAAO,YAAY,OAAO,cAAc,MAAM,IAAI,MAAM,6CAA6C;CACzG,IAAI,CAAC,SAAS,OAAO,UAAU,GAAG,MAAM,IAAI,MAAM,8BAA8B;CAChF,OAAO,OAAO;AAChB;;AAGA,SAAgB,kBAAkB,MAAc,SAAuE;CACrH,IAAI,CAAC,MAAM,OAAO;CAClB,MAAM,UAAU,QAAQ;CACxB,MAAM,UAAU,CAAC,WAAW,QAAQ,WAAW;CAC/C,MAAM,qBAAqB,QAAQ,sBAAsB;CACzD,IAAK,CAAC,WAAW,CAAC,QAAQ,SAAS,IAAI,KAAO,sBAAsB,qBAAqB,IAAI,IAAI,GAAI,OAAO;CAC5G,OAAO;AACT;AAEA,SAAgB,sBAAsB,OAAuB;CAC3D,OAAO,GAAG,MAAM;AAClB;AAEA,SAAgB,wBAAwB,OAAe,MAAc,OAAwB;CAC3F,OAAO,GAAG,MAAM,mBAAmB,KAAK,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpG;AAEA,SAAgB,eAAe,OAAe,OAAgD;CAC5F,OAAO,YAAY,GAAG,MAAM,iBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;AACvG;;AAGA,SAAgB,WAAW,KAAc,MAAsB;CAC7D,IAAI,CAAC,SAAS,GAAG,GAAG,MAAM,IAAI,MAAM,8BAA8B;CAClE,MAAM,OAAO,eAAe,IAAI,MAAM,MAAM;CAC5C,IAAI,SAAS,SAAS,SAAS,KAAK;EAAC;EAAQ;EAAW;EAAQ;EAAO;CAAK,GAAG,WAAW,KAAK,EAAE;CACjG,OAAO;AACT;AAEA,SAAgB,YACd,MACA,QACkB;CAClB,OAAO;EACL,UAAU;GAAE;GAAM,WAAW;GAAS;EAAO;EAC7C,QAAQ;GAAE,MAAM;GAAS,GAAG;EAAO;CACrC;AACF;;AAGA,SAAgB,aAAa,KAAiB,MAAc,MAAgC;CAC1F,IAAI,SAAS,qBAAqB,SAAS,OAAO;EAChD,SAAS,KAAK;GAAC;GAAQ;GAAO;EAAS,GAAG,WAAW,KAAK,EAAE;EAC5D,MAAM,MAAM,aAAa,IAAI,GAAG;EAChC,MAAM,UAAU,iBAAiB,IAAI,OAAO;EAC5C,MAAM,YAAY,SAAS,oBAAoB,SAAS;EACxD,MAAM,SAAS;GAAE;GAAK,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;EAAG;EACtD,OAAO;GACL,UAAU;IAAE;IAAM;IAAW;GAAO;GACpC,QAAQ;IAAE,MAAM;IAAW,GAAG;GAAO;EACvC;CACF;CACA,MAAM,IAAI,MAAM,+BAA+B,KAAK,EAAE;AACxD;AAEA,SAAgB,eAAe,iBAAqD;CAClF,OAAO,GAAG,KAAK,UAAU,EAAE,YAAY,gBAAgB,GAAG,MAAM,CAAC,EAAE;AACrE;AAEA,SAAgB,eAAe,QAA0C,YAAoB,UAA0B;CACrH,QAAA,GAAOA,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CACxB,OAAO,mBAAmB,CAAC,CAC3B,OAAO,OAAO,QAAQ,CAAC,CACvB,OAAO,IAAI,CAAC,CACZ,OAAO,OAAO,aAAa,CAAC,CAC5B,OAAO,IAAI,CAAC,CACZ,OAAO,UAAU,CAAC,CAClB,OAAO,IAAI,CAAC,CACZ,OAAO,QAAQ,CAAC,CAChB,OAAO,KAAK;AACjB;;AAGA,SAAgB,0BACd,UACA,YACA,qBACiD;CACjD,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;CACnC,MAAM,MAAM,eAAe,UAAU,KAAK;CAC1C,IAAI,IAAI,WAAW,IAAI,GAAG,OAAO;EAAE,MAAM;EAAY,WAAWD,UAAAA,QAAK,QAAQ,YAAY,GAAG;CAAE;CAC9F,MAAM,WAAW,yBAAyB,KAAK,YAAY,mBAAmB;CAC9E,IAAI,QAAQ,oBAAoB,IAAI,WAAW,iBAAiB,GAC9D,OAAO;EAAE,MAAM;EAAY,WAAWA,UAAAA,QAAK,QAAQ,QAAQ;CAAE;CAE/D,IAAI,QAAQ,oBAAoB,IAAI,WAAW,iBAAiB,GAC9D,OAAO;EAAE,MAAM;EAAqB,WAAWA,UAAAA,QAAK,QAAQ,QAAQ;CAAE;CAExE,MAAM,IAAI,MAAM,2DAA2D;AAC7E;;AAGA,SAAgB,wBAAwB,SAA0B;CAChE,IAAI,QAAQ,WAAW,IAAI,GAAG,OAAO;CACrC,IAAI,YAAY,OAAO,YAAY,QAAQ,WAAW,KAAK,OAAO,GAChE,MAAM,IAAI,MAAM,uEAAuE;CAEzF,OAAO;AACT;;;AC3RA,SAASG,oBAAkB,MAAc,WAAmB,OAAuB;CACjF,IAAI;CACJ,IAAI;EACF,gBAAgBC,QAAAA,QAAG,aAAa,SAAS;CAC3C,QAAQ;EACN,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB;CAC3C;CACA,IAAI,CAAC,SAAS,MAAM,aAAa,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,sCAAsC;CACnG,OAAO;AACT;AAEA,SAASC,mBAAiB,SAAiB,YAA4B;CACrE,IAAI,CAAC,wBAAwB,OAAO,GAAG,OAAO;CAC9C,MAAM,WAAWF,oBAAkB,YAAYG,UAAAA,QAAK,QAAQ,YAAY,OAAO,GAAG,SAAS;CAC3F,IAAI,CAACF,QAAAA,QAAG,SAAS,QAAQ,CAAC,CAAC,OAAO,GAAG,MAAM,IAAI,MAAM,wCAAwC;CAC7F,IAAI;EACF,QAAA,QAAG,WAAW,UAAUA,QAAAA,QAAG,UAAU,IAAI;CAC3C,QAAQ;EACN,MAAM,IAAI,MAAM,4CAA4C;CAC9D;CACA,OAAO;AACT;AAEA,SAASG,4BAA0B,UAAmB,YAAoB,qBAAqC;CAC7G,MAAM,cAAc,0BAA0B,UAAU,YAAY,mBAAmB;CACvF,IAAI,CAAC,aAAa,OAAO;CACzB,MAAM,WAAWJ,oBAAkB,YAAY,MAAM,YAAY,WAAW,KAAK;CACjF,IAAI,CAACC,QAAAA,QAAG,SAAS,QAAQ,CAAC,CAAC,YAAY,GAAG,MAAM,IAAI,MAAM,iCAAiC;CAC3F,OAAO;AACT;AAEA,SAASI,kBACP,KACA,YACA,qBACA,MACkB;CAClB,MAAM,OAAO,WAAW,KAAK,IAAI;CACjC,MAAM,cAAc;CACpB,IAAI,SAAS,SAAS,OAAO,aAAa,aAAa,MAAM,IAAI;CACjE,MAAM,UAAUH,mBAAiB,eAAe,YAAY,SAAS,SAAS,GAAG,UAAU;CAC3F,MAAM,OAAO,oBAAoB,YAAY,MAAM,MAAM,CAAC,EAAE,KAAK,SAC/D,yBAAyB,MAAM,YAAY,mBAAmB,CAChE;CACA,MAAM,MAAM,qBAAqB,YAAY,KAAK,YAAY,mBAAmB;CACjF,MAAM,MAAME,4BAA0B,YAAY,KAAK,YAAY,mBAAmB;CACtF,OAAO,YAAY,MAAM;EAAE;EAAS,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;EAAI;EAAK;CAAI,CAAC;AAC3E;AAEA,SAASE,4BAA0B,QAAgB,UAAkB,kBAAgC;CACnG,QAAA,QAAG,UAAU,kBAAkB;EAAE,MAAA;EAA8B,WAAW;CAAK,CAAC;CAChF,QAAA,QAAG,UAAU,kBAAA,GAAwC;CACrD,MAAM,gBAAgB,GAAG,OAAO,GAAG,QAAQ,IAAI,IAAA,GAAGC,YAAAA,WAAAA,CAAW,EAAE;CAC/D,IAAI;EACF,QAAA,QAAG,cAAc,eAAe,UAAU;GAAE,MAAM;GAAM,MAAA;EAAwB,CAAC;EACjF,IAAI;GACF,QAAA,QAAG,WAAW,eAAe,MAAM;EACrC,SAAS,OAAO;GACd,MAAM,OAAQ,MAAgC;GAC9C,IAAI,SAAS,YAAY,SAAS,SAAS,MAAM;GACjD,MAAM,OAAON,QAAAA,QAAG,UAAU,MAAM;GAChC,IAAI,KAAK,eAAe,KAAK,CAAC,KAAK,OAAO,KAAKA,QAAAA,QAAG,aAAa,QAAQ,MAAM,MAAM,UACjF,MAAM,IAAI,MAAM,iEAAiE;EAErF;EACA,QAAA,QAAG,UAAU,QAAA,GAAyB;CACxC,UAAU;EACR,QAAA,QAAG,OAAO,eAAe,EAAE,OAAO,KAAK,CAAC;CAC1C;AACF;;;;;;;;;;;AAYA,SAAgB,8BACd,QACA,SACgC;CAChC,MAAM,QAAQ,YAAY,MAAM;CAChC,IAAI;EACF,uBAAuB,MAAM;EAC7B,MAAM,aAAaA,QAAAA,QAAG,aAAa,OAAO,UAAU;EACpD,IAAI;GACF,MAAM,WAAWA,QAAAA,QAAG,UAAU,OAAO,mBAAmB;GACxD,IAAI,SAAS,eAAe,KAAK,CAAC,SAAS,YAAY,GACrD,MAAM,IAAI,MAAM,8CAA8C;EAElE,SAAS,OAAO;GACd,IAAK,MAAgC,SAAS,UAAU,MAAM;GAC9D,QAAA,QAAG,UAAU,OAAO,qBAAqB;IAAE,MAAA;IAA8B,WAAW;GAAK,CAAC;EAC5F;EACA,QAAA,QAAG,UAAU,OAAO,qBAAA,GAA2C;EAC/D,QAAA,QAAG,WAAW,OAAO,qBAAqBA,QAAAA,QAAG,UAAU,IAAI;EAC3D,MAAM,sBAAsBA,QAAAA,QAAG,aAAa,OAAO,mBAAmB;EACtE,MAAM,aAAaD,oBAAkB,YAAY,OAAO,YAAY,UAAU;EAC9E,qBAAqB,YAAY,UAAU;EAE3C,MAAM,UAAU,iBAAiB,QAAQC,QAAAA,QAAG,aAAa,UAAU,GAAG,KAAK;EAC3E,MAAM,kBAAkB,OAAO,OAAO,IAAI;EAC1C,MAAM,gBAAgB,OAAO,OAAO,IAAI;EACxC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAE/B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,OAAO,GAAG;GACvD,MAAM,cAAc,kBAAkB,MAAM,OAAO;GACnD,IAAI,gBAAgB,SAAS;IAC3B,YAAY,KAAK,sBAAsB,KAAK,CAAC;IAC7C;GACF;GACA,IAAI,gBAAgB,WAAW;IAC7B,eAAe,KAAK,IAAI;IACxB;GACF;GACA,IAAI;IACF,MAAM,aAAaI,kBAAgB,WAAW,YAAY,qBAAqB,IAAI;IACnF,gBAAgB,QAAQ,WAAW;IACnC,cAAc,QAAQ,WAAW;GACnC,SAAS,OAAO;IACd,eAAe,KAAK,IAAI;IACxB,YAAY,KAAK,wBAAwB,OAAO,MAAM,KAAK,CAAC;GAC9D;EACF;EAEA,MAAM,WAAW,eAAe,eAAe;EAC/C,MAAM,SAAS,mBAAmB,QAAQ,UAAU,QAAQ,gBAAgB;EAC5E,4BAA0B,QAAQ,UAAU,QAAQ,gBAAgB;EACpE,OAAO;GACL,cAAc;IAAE,MAAM;IAAQ,QAAQ;IAAY,UAAU,eAAe,QAAQ,YAAY,QAAQ;GAAE;GACzG,cAAc,EAAE,YAAY,cAAc;GAC1C,aAAa,OAAO,KAAK,eAAe;GACxC;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO,eAAe,OAAO,KAAK;CACpC;AACF;AAEA,MAAM,sBAAsB;AAE5B,SAAS,cAAc,OAAkD;CACvE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,eAAe,qBAAqB,OAAqC;CACvE,MAAM,SAAS,MAAM;CACrB,MAAM,WACJ,QAAQ,SAAS,QACb;EAAC;EAAO,OAAO;EAAK,OAAO,QAAQ;CAAE,IACrC,QAAQ,SAAS,QACf;EAAC;EAAO,OAAO,YAAY;EAAI,OAAO;CAAO,IAC7C,CAAC,SAAS,MAAMJ,QAAAA,QAAG,SAAS,SAAS,MAAM,SAAS,CAAC;CAC7D,QAAA,GAAOO,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,UAAU,QAAQ,CAAC,CAAC,CAAC,OAAO,KAAK;AAC3E;AAEA,eAAe,sBAAsB,OAAiD;CACpF,MAAM,eAAeL,UAAAA,QAAK,KAAK,MAAM,WAAW,aAAa;CAC7D,IAAI,MAAM,UAAU,SAAS,gBAAgB,MAAM,SAAS,sBAAsB,qBAChF,OAAO;CAET,IAAI;EACF,MAAM,OAAO,MAAMF,QAAAA,QAAG,SAAS,MAAM,YAAY;EACjD,IAAI,KAAK,eAAe,KAAK,CAAC,KAAK,OAAO,GAAG,OAAO,KAAA;EACpD,MAAM,SAAS,KAAK,MAAM,MAAMA,QAAAA,QAAG,SAAS,SAAS,cAAc,MAAM,CAAC;EAC1E,OAAO,cAAc,MAAM,KAAK,OAAO,YAAY,sBAAsB,sBAAsB,KAAA;CACjG,QAAQ;EACN;CACF;AACF;;AAGA,eAAsB,gBACpB,OACA,gBAC4C;CAC5C,IAAI,MAAM,QAAQ,OAAO,OAAO,KAAA;CAChC,MAAM,aAAa,MAAMA,QAAAA,QAAG,SAAS,SAAS,MAAM,SAAS;CAC7D,MAAM,cAAe,MAAM,sBAAsB,KAAK,MAAO;CAC7D,MAAM,aAAaE,UAAAA,QAAK,KAAK,YAAY,cAAc,aAAa,WAAW;CAC/E,IAAI;CACJ,IAAI;EACF,OAAO,MAAMF,QAAAA,QAAG,SAAS,MAAM,UAAU;CAC3C,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU,OAAO,KAAA;EAC/D,MAAM;CACR;CACA,IAAI,CAAC,KAAK,OAAO,KAAK,KAAK,eAAe,GAAG,OAAO,KAAA;CACpD,MAAM,UAAU,MAAMA,QAAAA,QAAG,SAAS,SAAS,UAAU;CACrD,MAAM,iBAAA,GAAgBO,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK;CACvE,MAAM,WAAW,MAAM,qBAAqB,KAAK;CACjD,MAAM,WAAW,UAAU;CAC3B,IAAI,CAAC,aAAa,OAAO;EAAE;EAAU,OAAO;EAAU,QAAQ;EAAU;EAAY;CAAc;CAClG,OAAO;EACL;EACA,OAAO;EACP,QAAQ;EACR;EACA;EACA;EACA;EACA,qBAAqBL,UAAAA,QAAK,KAAK,gBAAgB,QAAQ;EACvD,cAAcM,iCAAAA;CAChB;AACF;;;AChNA,eAAe,kBACb,IACA,MACA,WACA,OACA,SACiB;CACjB,MAAM,OAAO,MAAM,GAAG,cAAc,WAAW,OAAO;CACtD,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,MAAM,GAAG,MAAM,gBAAgB;CACvD,IAAI,CAAC,SAAS,MAAM,KAAK,KAAK,GAAG,MAAM,IAAI,MAAM,GAAG,MAAM,sCAAsC;CAChG,OAAO,KAAK;AACd;AAEA,eAAe,iBACb,IACA,SACA,YACA,SACiB;CACjB,IAAI,CAAC,wBAAwB,OAAO,GAAG,OAAO;CAC9C,MAAM,WAAW,MAAM,kBAAkB,IAAI,YAAYC,UAAAA,QAAK,QAAQ,YAAY,OAAO,GAAG,WAAW,OAAO;CAC9G,KAAA,GAAIC,4BAAAA,WAAAA,CAAW,MAAM,GAAG,SAAS,UAAU,OAAO,CAAC,CAAC,CAAC,SAAS,QAC5D,MAAM,IAAI,MAAM,wCAAwC;CAG1D,MAAM,OAAO,MAAMC,4BAAAA,SAAS,SAAS,QAAQ;CAC7C,IAAI,SAAS,KAAA,MAAc,OAAO,QAAW,GAAG,MAAM,IAAI,MAAM,4CAA4C;CAC5G,OAAO;AACT;AAEA,eAAe,0BACb,IACA,UACA,YACA,qBACA,SACiB;CACjB,MAAM,cAAc,0BAA0B,UAAU,YAAY,mBAAmB;CACvF,IAAI,CAAC,aAAa,OAAO;CACzB,MAAM,WAAW,MAAM,kBAAkB,IAAI,YAAY,MAAM,YAAY,WAAW,OAAO,OAAO;CACpG,KAAA,GAAID,4BAAAA,WAAAA,CAAW,MAAM,GAAG,SAAS,UAAU,OAAO,CAAC,CAAC,CAAC,SAAS,aAC5D,MAAM,IAAI,MAAM,iCAAiC;CAEnD,OAAO;AACT;AAEA,eAAe,gBACb,IACA,KACA,YACA,qBACA,MACA,SAC2B;CAC3B,MAAM,OAAO,WAAW,KAAK,IAAI;CACjC,MAAM,cAAc;CACpB,IAAI,SAAS,SAAS,OAAO,aAAa,aAAa,MAAM,IAAI;CACjE,MAAM,UAAU,MAAM,iBAAiB,IAAI,eAAe,YAAY,SAAS,SAAS,GAAG,YAAY,OAAO;CAC9G,MAAM,OAAO,oBAAoB,YAAY,MAAM,MAAM,CAAC,EAAE,KAAK,SAC/D,yBAAyB,MAAM,YAAY,mBAAmB,CAChE;CACA,MAAM,MAAM,qBAAqB,YAAY,KAAK,YAAY,mBAAmB;CACjF,MAAM,MAAM,MAAM,0BAA0B,IAAI,YAAY,KAAK,YAAY,qBAAqB,OAAO;CACzG,OAAO,YAAY,MAAM;EAAE;EAAS,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;EAAI;EAAK;CAAI,CAAC;AAC3E;;AAGA,eAAe,2BAA2B,IAAgB,WAAmB,SAAmC;CAC9G,MAAM,OAAO,MAAM,GAAG,SAAS,WAAW,OAAO;CACjD,IAAI,KAAK,IACH;MAAA,KAAK,MAAM,SAAS,aAAa,MAAM,IAAI,MAAM,8CAA8C;CAAA,OAC9F,IAAI,KAAK,MAAM,SAAS,aAC7B,CAAA,GAAA,4BAAA,WAAA,CAAW,MAAM,GAAG,UAAU,WAAW,EAAE,WAAW,KAAK,GAAG,OAAO,CAAC;MAEtE,MAAM,KAAK;CAEb,MAAMC,4BAAAA,SAAS,QAAQ,WAAA,GAAiC;CACxD,QAAA,GAAOD,4BAAAA,WAAAA,CAAW,MAAM,GAAG,cAAc,WAAW,OAAO,CAAC;AAC9D;;;;;AAMA,eAAe,0BACb,IACA,QACA,UACA,kBACA,SACe;CACf,CAAA,GAAA,4BAAA,WAAA,CAAW,MAAM,GAAG,UAAU,kBAAkB,EAAE,WAAW,KAAK,GAAG,OAAO,CAAC;CAC7E,MAAMC,4BAAAA,SAAS,QAAQ,kBAAA,GAAwC;CAC/D,OAAA,GAAMC,4BAAAA,gBAAAA,CAAgB,IAAI,QAAQ,UAAU,OAAO;CACnD,MAAMD,4BAAAA,SAAS,QAAQ,QAAA,GAAyB;AAClD;;;;;;;;;;AAWA,eAAsB,mCACpB,IACA,QACA,SACA,SACyC;CACzC,MAAM,QAAQ,YAAY,MAAM;CAChC,IAAI;EACF,uBAAuB,MAAM;EAC7B,MAAM,cAAA,GAAaD,4BAAAA,WAAAA,CAAW,MAAM,GAAG,cAAc,OAAO,YAAY,OAAO,CAAC;EAChF,MAAM,sBAAsB,MAAM,2BAA2B,IAAI,OAAO,qBAAqB,OAAO;EACpG,MAAM,aAAa,MAAM,kBAAkB,IAAI,YAAY,OAAO,YAAY,YAAY,OAAO;EACjG,qBAAqB,YAAY,UAAU;EAG3C,MAAM,UAAU,iBAAiB,SAD3B,GAAQA,4BAAAA,WAAAA,CAAW,MAAM,GAAG,eAAe,YAAY,OAAO,CAC3B,GAAO,KAAK;EACrD,MAAM,kBAAkB,OAAO,OAAO,IAAI;EAC1C,MAAM,gBAAgB,OAAO,OAAO,IAAI;EACxC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAE/B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,OAAO,GAAG;GACvD,MAAM,cAAc,kBAAkB,MAAM,OAAO;GACnD,IAAI,gBAAgB,SAAS;IAC3B,YAAY,KAAK,sBAAsB,KAAK,CAAC;IAC7C;GACF;GACA,IAAI,gBAAgB,WAAW;IAC7B,eAAe,KAAK,IAAI;IACxB;GACF;GACA,IAAI;IACF,MAAM,aAAa,MAAM,gBAAgB,IAAI,WAAW,YAAY,qBAAqB,MAAM,OAAO;IACtG,gBAAgB,QAAQ,WAAW;IACnC,cAAc,QAAQ,WAAW;GACnC,SAAS,OAAO;IACd,eAAe,KAAK,IAAI;IACxB,YAAY,KAAK,wBAAwB,OAAO,MAAM,KAAK,CAAC;GAC9D;EACF;EAEA,MAAM,WAAW,eAAe,eAAe;EAC/C,MAAM,SAAS,mBAAmB,QAAQ,UAAU,QAAQ,gBAAgB;EAC5E,MAAM,0BAA0B,IAAI,QAAQ,UAAU,QAAQ,kBAAkB,OAAO;EACvF,OAAO;GACL,cAAc;IAAE,MAAM;IAAQ,QAAQ;IAAY,UAAU,eAAe,QAAQ,YAAY,QAAQ;GAAE;GACzG,cAAc,EAAE,YAAY,cAAc;GAC1C,aAAa,OAAO,KAAK,eAAe;GACxC;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO,eAAe,OAAO,KAAK;CACpC;AACF"}
@@ -1,5 +1,6 @@
1
+ import { u as PluginEntry } from "./domains-Bo9krPQ5.mjs";
1
2
  import { FileSystem } from "@agimon-ai/po-core/platform";
2
- import { PoMcpAgentPluginProjectionSource } from "@agimon-ai/po-core/mcpProjection";
3
+ import { PoMcpAgentPluginProjectionSource, PoMcpProjectionSource } from "@agimon-ai/po-core/mcpProjection";
3
4
  //#region src/services/agentPluginMcp/normalize.d.ts
4
5
  type JsonObject = Record<string, unknown>;
5
6
  interface AgentPluginMcpConfigSource {
@@ -38,6 +39,8 @@ interface NormalizeAgentPluginMcpOptions {
38
39
  * @deprecated Node-only sync shim; use normalizeAgentPluginMcpSourceAsync. Removed in M2.
39
40
  */
40
41
  export declare function normalizeAgentPluginMcpSource(source: PoMcpAgentPluginProjectionSource, options: NormalizeAgentPluginMcpOptions): NormalizedAgentPluginMcpSource;
42
+ /** One plugin's MCP config as a projection source, or nothing when it ships none. Shared by sync and settings. */
43
+ export declare function pluginMcpSource(entry: PluginEntry, pluginDataRoot: string): Promise<PoMcpProjectionSource | undefined>;
41
44
  //#endregion
42
45
  //#region src/services/agentPluginMcp/index.d.ts
43
46
  type Context = Parameters<FileSystem['readTextFile']>[1];
@@ -1 +1 @@
1
- {"version":3,"file":"agentPluginMcp.d.mts","names":[],"sources":["../src/services/agentPluginMcp/normalize.ts","../src/services/agentPluginMcp/sync.ts","../src/services/agentPluginMcp/index.ts"],"mappings":";;;KAsBY,aAAa;UAER;EACf;EACA;EACA;;UAGe;;EAEf,eAAe;;EAEf;IAAgB,YAAY,eAAe;;EAC3C;EACA;EACA;;UAGe;EACf;;EAEA;;EAEA;;;;;;;;;;;;;;wBCwEc,8BACd,QAAQ,kCACR,SAAS,iCACR;;;KC9EE,UAAU,WAAW;;;;;;;;;;wBA4GJ,mCACpB,IAAI,YACJ,QAAQ,kCACR,SAAS,gCACT,SAAS,UACR,QAAQ"}
1
+ {"version":3,"file":"agentPluginMcp.d.mts","names":[],"sources":["../src/services/agentPluginMcp/normalize.ts","../src/services/agentPluginMcp/sync.ts","../src/services/agentPluginMcp/index.ts"],"mappings":";;;;KAsBY,aAAa;UAER;EACf;EACA;EACA;;UAGe;;EAEf,eAAe;;EAEf;IAAgB,YAAY,eAAe;;EAC3C;EACA;EACA;;UAGe;EACf;;EAEA;;EAEA;;;;;;;;;;;;;;wBC8Ec,8BACd,QAAQ,kCACR,SAAS,iCACR;;wBA8FmB,gBACpB,OAAO,aACP,yBACC,QAAQ;;;KCrLN,UAAU,WAAW;;;;;;;;;;wBA4GJ,mCACpB,IAAI,YACJ,QAAQ,kCACR,SAAS,gCACT,SAAS,UACR,QAAQ"}